Ataques de Envenenamento de Rótulos contra a Detecção de Zero-Day em Sistemas de Detecção de Intrusão Colaborativos

• Giovanni H. M. de L. Siervo UFU https://orcid.org/0009-0000-3804-8251
• Maria Eduarda S. Chessio UNIPAMPA
• Silvio E. Quincozes UFU / UNIPAMPA https://orcid.org/0000-0001-6793-4033
• Daniel Mossé University of Pittsburgh https://orcid.org/0000-0002-9508-9815
• Vagner E. Quincozes UFF https://orcid.org/0000-0002-6688-5572
• Célio Albuquerque UFF https://orcid.org/0000-0002-7959-6569
• Diego Passos ISEL https://orcid.org/0000-0002-9707-1176

DOI: https://doi.org/10.5753/sbrc.2026.19949

Resumo

Sistemas de Detecção de Intrusões (IDSs) colaborativos, como as Redes de Conselhos (CNs), ampliam a detecção de ataques zero-day por meio da troca de recomendações entre nós autônomos. Entretanto, esse mecanismo torna-se vulnerável a ataques de envenenamento de rótulos, capazes de se propagar pelos conselhos trocados. Este trabalho formaliza um novo tipo de ataque denominado envenenamento de conselhos e avalia o seu impacto em IDSs baseados em CNs, analisando a dinâmica de aprendizado e o desempenho de detecção em um cenário ciberfísico com veículos aéreos não tripulados. Experimentos em uma CN de três nós, com taxas de envenenamento de 0%, 50% e 100%, mostram aumento de conflitos entre classificadores quando há envenenamento seletivo e degradação severa da detecção de zero-day quando há envenenamento total, culminando no colapso da inteligência colaborativa.

Referências

Belenguer, A., Garcia-Teodoro, P., Diaz-Verdejo, J., and Maciá-Fernández, G. (2025). Federated learning for intrusion detection systems: A comprehensive review. Computer Networks, 241:110204.

Chen, L., Zhai, W., Bu, X., Sun, M., and Zhu, C. (2025). A lightweight robust training method for defending model poisoning attacks in federated learning assisted uav networks. Drones, 9(8):528.

da Silva, L. M. and Branco, K. R. (2025). Collaborative intrusion detection system for unmanned aerial vehicles swarm security. In Concurso de Teses e Dissertações (CTD), pages 134–143. SBC.

Feng, C., Li, Y., Gao, Y., Celdrán, A. H., von der Assen, J., Bovet, G., and Stiller, B. (2025). Dmpa: Model poisoning attacks on decentralized federated learning for model differences. arXiv preprint arXiv:2502.04771.

Hassler, S. C., Mughal, U. A., and Ismail, M. (2024). Cyber-physical intrusion detection system for unmanned aerial vehicles. IEEE Transactions on Intelligent Transportation Systems, 25(6):6106–6117.

Jha, R. D., Hayase, J., and Oh, S. (2023). Label poisoning is all you need. In Proceedings of the 37th International Conference on Neural Information Processing Systems, NIPS ’23, Red Hook, NY, USA. Curran Associates Inc.

Lavaur, L., Busnel, Y., and Autrel, F. (2025). Investigating the impact of label-flipping attacks against federated learning for collaborative intrusion detection. Computers & Security, 156:104462.

Liu, Z., Liu, Z., and Yang, X. (2023). Poisoning attack based on data feature selection in federated learning. In 2023 13th International Conference on Cloud Computing, Data Science & Engineering (Confluence), pages 106–110. IEEE.

McMahan, H. B., Moore, E., Ramage, D., Hampson, S., and Arcas, B. A. y. (2017). Communication-efficient learning of deep networks from decentralized data. In Proceedings of the 20th International Conference on Artificial Intelligence and Statistics (AISTATS), volume 54 of Proceedings of Machine Learning Research, pages 1273–1282, Fort Lauderdale, FL, USA. PMLR.

Quincozes, S. E., dos Santos, C. R. P., Nunes, R. C., de Albuquerque, C. V. N., Passos, D. G., and Mossé, D. (2019). A counselors-based intrusion detection architecture. In Ziviani, A., de Albuquerque, C. V. N., and Moraes, I. M., editors, 9th Latin American Network Operations and Management Symposium (LANOMS 2019), Niterói, Rio de Janeiro, Brazil, September 25–27, 2019, pages 1–8. IFIP.

Quincozes, S. E., Raniery, C., Ceretta Nunes, R., Albuquerque, C., Passos, D., and Mossé, D. (2021). Counselors network for intrusion detection. International Journal of Network Management, 31(3):e2111.

Rodríguez-Barroso, N., Stipcich, G., Vicent, J., Binos, E., Cazorla, M., Marín, L., Serrano, J., and Lobo, J. L. (2023). Survey on federated learning threats: Concepts, taxonomy on attacks and defences, experimental study and challenges. Information Fusion, 89:1–38.

Tan, S., Hao, F., Gu, T., Li, L., and Liu, M. (2023). Collusive model poisoning attack in decentralized federated learning. IEEE Transactions on Industrial Informatics, 20(4):5989–5999.

Vasilomanolakis, E., Karuppayah, S., Mühlhäuser, M., and Fischer, M. (2015). A taxonomy and survey of collaborative intrusion detection systems. ACM Computing Surveys, 47(4):1–33.

Xue, L., Zhong, L., Zhang, J., Chen, Z., Cheng, H., and Li, J. (2025). Decentralized federated learning for adversarial anomaly detection in consumer-grade uav-assisted mec systems. IEEE Transactions on Consumer Electronics, 71(4):10797–10811.

Yang, R., He, H., Wang, Y., Qu, Y., and Zhang, W. (2023). Dependable federated learning for IoT intrusion detection against poisoning attacks. Computers & Security, 132:103381.