{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T15:48:25Z","timestamp":1781279305198,"version":"3.54.1"},"reference-count":101,"publisher":"MDPI AG","issue":"9","license":[{"start":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T00:00:00Z","timestamp":1757289600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>The Industrial Internet of Things (IIoT) is transforming industrial operations through connected devices and real-time automation but also introduces significant cybersecurity risks. Cyber threat intelligence (CTI) is critical for detecting and mitigating such threats, yet traditional centralized CTI approaches face limitations in latency, scalability, and data privacy. Federated learning (FL) offers a privacy-preserving alternative by enabling decentralized model training without sharing raw data. This survey explores how FL can enhance CTI in IIoT environments. It reviews FL architectures, orchestration strategies, and aggregation methods, and maps their applications to domains such as intrusion detection, malware analysis, botnet mitigation, anomaly detection, and trust management. Among its contributions is an empirical synthesis comparing FL aggregation strategies\u2014including FedAvg, FedProx, Krum, ClippedAvg, and Multi-Krum\u2014across accuracy, robustness, and efficiency under IIoT constraints. The paper also presents a taxonomy of FL-based CTI approaches and outlines future research directions to support the development of secure, scalable, and decentralized threat intelligence systems for industrial ecosystems.<\/jats:p>","DOI":"10.3390\/fi17090409","type":"journal-article","created":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T11:51:12Z","timestamp":1757332272000},"page":"409","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Survey of Federated Learning for Cyber Threat Intelligence in Industrial IoT: Techniques, Applications and Deployment Models"],"prefix":"10.3390","volume":"17","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-1527-3322","authenticated-orcid":false,"given":"Abin Kumbalapalliyil","family":"Tom","sequence":"first","affiliation":[{"name":"Centre for Artificial Intelligence Research and Optimization (AIRO), Torrens University Australia (TUA), 46\u201352 Mountain Street, Ultimo, NSW 2007, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8623-0987","authenticated-orcid":false,"given":"Ansam","family":"Khraisat","sequence":"additional","affiliation":[{"name":"School of Info Technology, Faculty of Science Engineering & Built Environment, Deakin University, Burwood, VIC 3125, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3114-8978","authenticated-orcid":false,"given":"Tony","family":"Jan","sequence":"additional","affiliation":[{"name":"Centre for Artificial Intelligence Research and Optimization (AIRO), Torrens University Australia (TUA), 46\u201352 Mountain Street, Ultimo, NSW 2007, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2822-0657","authenticated-orcid":false,"given":"Md","family":"Whaiduzzaman","sequence":"additional","affiliation":[{"name":"Centre for Artificial Intelligence Research and Optimization (AIRO), Torrens University Australia (TUA), 46\u201352 Mountain Street, Ultimo, NSW 2007, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8889-0903","authenticated-orcid":false,"given":"Thien D.","family":"Nguyen","sequence":"additional","affiliation":[{"name":"Centre for Artificial Intelligence Research and Optimization (AIRO), Torrens University Australia (TUA), 46\u201352 Mountain Street, Ultimo, NSW 2007, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9443-937X","authenticated-orcid":false,"given":"Ammar","family":"Alazab","sequence":"additional","affiliation":[{"name":"Centre for Artificial Intelligence Research and Optimization (AIRO), Torrens University Australia (TUA), 46\u201352 Mountain Street, Ultimo, NSW 2007, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2025,9,8]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"1238","DOI":"10.1109\/COMST.2024.3430368","article-title":"A survey on intelligent Internet of Things: Applications, security, privacy, and future directions","volume":"27","author":"Aouedi","year":"2024","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"856","DOI":"10.1016\/j.procs.2022.12.282","article-title":"Industrial Internet of Things (IIoT): Opportunities, Challenges, and Requirements in Manufacturing Businesses in Emerging Economies","volume":"217","author":"Peter","year":"2023","journal-title":"Procedia Comput. Sci."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"2525","DOI":"10.1109\/COMST.2021.3117338","article-title":"A Comparative Study on Cyber Threat Intelligence: The Security Incident Response Perspective","volume":"23","author":"Schlette","year":"2021","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"411","DOI":"10.1049\/icp.2024.0960","article-title":"Analytical study for cyber threat intelligence (CTI)","volume":"Volume 2023","author":"Alkhateeb","year":"2023","journal-title":"Proceedings of the IET Conference Proceedings CP859"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"190","DOI":"10.62019\/abbdm.v3i2.85","article-title":"Machine Learning Applications in Cyber Threat Intelligence: A Comprehensive Review","volume":"3","author":"Naseer","year":"2024","journal-title":"Asian Bull. Big Data Manag."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"El Jaouhari, S., and Etiabi, Y. (2023, January 7\u201310). FedCTI: Federated Learning and Cyber Threat Intelligence on the Edge for secure IoT Networks. Proceedings of the 13th International Conference on the Internet of Things, Nagoya, Japan.","DOI":"10.1145\/3627050.3627064"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"294","DOI":"10.1016\/j.comcom.2023.06.020","article-title":"Cybersecurity for Industrial IoT (IIoT): Threats, countermeasures, challenges and future directions","volume":"208","author":"Mekala","year":"2023","journal-title":"Comput. Commun."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Czeczot, G., Rojek, I., Miko\u0142ajewski, D., and Sangho, B. (2023). AI in IIoT management of cybersecurity for industry 4.0 and industry 5.0 purposes. Electronics, 12.","DOI":"10.3390\/electronics12183800"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Raimundo, R.J., and Ros\u00e1rio, A.T. (2022). Cybersecurity in the Internet of Things in Industrial Management. Appl. Sci., 12.","DOI":"10.3390\/app12031598"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"7","DOI":"10.1007\/s43926-020-00001-4","article-title":"Role of Artificial Intelligence in the Internet of Things (IoT) cybersecurity","volume":"1","author":"Kuzlu","year":"2021","journal-title":"Discov. Internet Things"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Alnajim, A.M., Habib, S., Islam, M., Thwin, S.M., and Alotaibi, F. (2023). A comprehensive survey of cybersecurity threats, attacks, and effective countermeasures in industrial internet of things. Technologies, 11.","DOI":"10.3390\/technologies11060161"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"1748","DOI":"10.1109\/COMST.2023.3273282","article-title":"Cyber Threat Intelligence Mining for Proactive Cybersecurity Defense: A Survey and New Perspectives","volume":"25","author":"Sun","year":"2023","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Saeed, S., Suayyid, S.A., Al-Ghamdi, M.S., Al-Muhaisen, H., and Almuhaideb, A.M. (2023). A Systematic Literature Review on Cyber Threat Intelligence for Organizational Cybersecurity Resilience. Sensors, 23.","DOI":"10.3390\/s23167273"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Alturkistani, H., and Chuprat, S. (2024). Artificial Intelligence and Large Language Models in Advancing Cyber Threat Intelligence: A Systematic Literature Review. Res. Sq.","DOI":"10.2139\/ssrn.4903071"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Chatziamanetoglou, D., and Rantos, K. (2024). Cyber threat intelligence on blockchain: A systematic literature review. Computers, 13.","DOI":"10.3390\/computers13030060"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"518","DOI":"10.3390\/jcp4030025","article-title":"Knowledge Graphs and Semantic Web Tools in Cyber Threat Intelligence: A Systematic Literature Review","volume":"4","author":"Bratsas","year":"2024","journal-title":"J. Cybersecur. Priv."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Ramsdale, A., Shiaeles, S., and Kolokotronis, N. (2020). A Comparative Analysis of Cyber-Threat Intelligence Sources, Formats and Languages. Electronics, 9.","DOI":"10.3390\/electronics9050824"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Czekster, R.M., Metere, R., and Morisset, C. (2022). Incorporating cyber threat intelligence into complex cyber-physical systems: A STIX model for active buildings. Appl. Sci., 12.","DOI":"10.3390\/app12105005"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"103352","DOI":"10.1016\/j.cose.2023.103352","article-title":"Cyber-threat intelligence for security decision-making: A review and research agenda for practice","volume":"132","author":"Ainslie","year":"2023","journal-title":"Comput. Secur."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1007\/s10922-022-09691-3","article-title":"Cyber Threat Intelligence Sharing Scheme Based on Federated Learning for Network Intrusion Detection","volume":"31","author":"Sarhan","year":"2022","journal-title":"J. Netw. Syst. Manag."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"108379","DOI":"10.1016\/j.compeleceng.2022.108379","article-title":"HBFL: A Hierarchical Blockchain-Based Federated Learning Framework for Collaborative IoT Intrusion Detection","volume":"103","author":"Sarhan","year":"2022","journal-title":"Comput. Electr. Eng."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"110686","DOI":"10.1016\/j.comnet.2024.110686","article-title":"Priv-Share: A privacy-preserving framework for differential and trustless delegation of cyber threat intelligence using blockchain","volume":"252","author":"Dunnett","year":"2024","journal-title":"Comput. Netw."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1561\/2200000083","article-title":"Advances and open problems in federated learning","volume":"14","author":"Kairouz","year":"2021","journal-title":"Found. Trends Mach. Learn."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"106775","DOI":"10.1016\/j.knosys.2021.106775","article-title":"A Survey on Federated Learning","volume":"216","author":"Zhang","year":"2021","journal-title":"Knowl.-Based Syst."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"513","DOI":"10.1007\/s13042-022-01647-y","article-title":"A Survey on Federated Learning: Challenges and Applications","volume":"14","author":"Wen","year":"2022","journal-title":"Int. J. Mach. Learn. Cybern."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Woisetschl\u00e4ger, H., Erben, A., Wang, S., Mayer, R., and Jacobsen, H.A. (2024, January 9\u201315). Federated fine-tuning of llms on the very edge: The good, the bad, the ugly. Proceedings of the Eighth Workshop on Data Management for End-to-End Machine Learning, Santiago, Chile.","DOI":"10.1145\/3650203.3663331"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"272","DOI":"10.1016\/j.future.2023.09.008","article-title":"Model Aggregation Techniques in Federated Learning: A Comprehensive Survey","volume":"150","author":"Qi","year":"2023","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"128019","DOI":"10.1016\/j.neucom.2024.128019","article-title":"Recent advances on federated learning: A systematic survey","volume":"597","author":"Liu","year":"2024","journal-title":"Neurocomputing"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"17","DOI":"10.1016\/j.jpdc.2022.03.003","article-title":"FELIDS: Federated learning-based intrusion detection system for agricultural Internet of Things","volume":"165","author":"Friha","year":"2022","journal-title":"J. Parallel Distrib. Comput."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"e6812","DOI":"10.1002\/cpe.6812","article-title":"A Federated Learning Method for Network Intrusion Detection","volume":"34","author":"Tang","year":"2021","journal-title":"Concurr. Comput. Pract. Exp."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"2455","DOI":"10.1109\/JSYST.2023.3236995","article-title":"An efficient federated learning system for network intrusion detection","volume":"17","author":"Li","year":"2023","journal-title":"IEEE Syst. J."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/s41666-020-00082-4","article-title":"Federated Learning for Healthcare Informatics","volume":"5","author":"Xu","year":"2020","journal-title":"J. Healthc. Inform. Res."},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Woisetschl\u00e4ger, H., Isenko, A., Wang, S., Mayer, R., and Jacobsen, H.A. (2024, January 3\u20139). A Survey on Efficient Federated Learning Methods for Foundation Model Training. Proceedings of the Thirty-Third International Joint Conference on Artificial Intelligence (IJCAI-24), Jeju, Republic of Korea.","DOI":"10.24963\/ijcai.2024\/919"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Moshawrab, M., Adda, M., Bouzouane, A., Ibrahim, H., and Raad, A. (2023). Reviewing federated learning aggregation algorithms; strategies, contributions, limitations and future perspectives. Electronics, 12.","DOI":"10.3390\/electronics12102287"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"3643","DOI":"10.1109\/TWC.2021.3052681","article-title":"Convergence of Update Aware Device Scheduling for Federated Learning at the Wireless Edge","volume":"20","author":"Amiri","year":"2021","journal-title":"IEEE Trans. Wirel. Commun."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"108693","DOI":"10.1016\/j.comnet.2021.108693","article-title":"Federated Learning for Malware Detection in IoT Devices","volume":"204","author":"Rey","year":"2022","journal-title":"Comput. Netw."},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Nguyen, T.D., Rieger, P., Miettinen, M., and Sadeghi, A.R. (2020, January 23\u201326). Poisoning Attacks on Federated Learning-based IoT Intrusion Detection System. Proceedings of the Workshop on Decentralized IoT Systems and Security (DISS) 2020, San Diego, CA, USA.","DOI":"10.14722\/diss.2020.23003"},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"3492","DOI":"10.1109\/TII.2021.3107783","article-title":"Security and privacy-enhanced federated learning for anomaly detection in IoT infrastructures","volume":"18","author":"Cui","year":"2021","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"101015","DOI":"10.1016\/j.iot.2023.101015","article-title":"A privacy-preserving federated learning with a secure collaborative for malware detection models using Internet of Things resources","volume":"25","author":"Alamer","year":"2024","journal-title":"Internet Things"},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"2545","DOI":"10.1109\/JIOT.2021.3077803","article-title":"Federated-Learning-Based anomaly detection for IoT security attacks","volume":"9","author":"Mothukuri","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Li, Y., Zhang, Q., Wang, X., Zeng, R., Li, H., Murturi, I., Dustdar, S., and Huang, M. (2023). Federated Learning for Internet of Things. Learning Techniques for the Internet of Things, Springer.","DOI":"10.1007\/978-3-031-50514-0_3"},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Vucovich, M., Quinn, D., Choi, K., Redino, C., Rahman, A., and Bowen, E. (2024, January 8\u201310). FedBayes: A Zero-Trust Federated Learning Aggregation to Defend Against Adversarial Attacks. Proceedings of the 2022 IEEE 12th Annual Computing and Communication Workshop and Conference (CCWC), Las Vegas, NV, USA.","DOI":"10.1109\/CCWC60891.2024.10427896"},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Li, B., Wang, P., Huang, H., Ma, S., and Jiang, Y. (2021, January 5\u20138). FLPHISH: Reputation-based Phishing Byzantine Defense in ensemble Federated learning. Proceedings of the 2021 IEEE Symposium on Computers and Communications (ISCC), Athens, Greece.","DOI":"10.1109\/ISCC53001.2021.9631506"},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"3930","DOI":"10.1109\/JIOT.2021.3100755","article-title":"Federated Deep Learning for Zero-Day Botnet Attack Detection in IoT-Edge Devices","volume":"9","author":"Popoola","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Alnajjar, I.A., Almazaydeh, L., Odeh, A.A., Salameh, A.A., Alqarni, K., and Ban Atta, A.A. (2024). Anomaly Detection Based on Hierarchical Federated Learning with Edge-Enabled Object Detection for Surveillance Systems in Industry 4.0 Scenario. Int. J. Intell. Eng. Syst., 17.","DOI":"10.22266\/ijies2024.0831.49"},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"7157","DOI":"10.1109\/ACCESS.2023.3237554","article-title":"Distributed Anomaly Detection in Smart Grids: A Federated Learning-Based Approach","volume":"11","author":"Jithish","year":"2023","journal-title":"IEEE Access"},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"Verma, P., Breslin, J.G., and O\u2019Shea, D. (2022). FLDID: Federated Learning Enabled Deep Intrusion Detection in Smart Manufacturing Industries. Sensors, 22.","DOI":"10.3390\/s22228974"},{"key":"ref_48","doi-asserted-by":"crossref","unstructured":"Yoon, J.Y., and Choi, B.J. (2023). Privacy-Friendly Phishing Attack Detection Using Personalized Federated Learning. Intelligent Human Computer Interaction, Springer. Lecture Notes in Computer Science.","DOI":"10.1007\/978-3-031-27199-1_46"},{"key":"ref_49","unstructured":"Jindal, K., and Guha, K. (2023, January 15\u201316). Federated Learning-Based Malware Detection for IoT Platforms. Proceedings of the International Conference on Data, Electronics and Computing, Aizawl, India."},{"key":"ref_50","doi-asserted-by":"crossref","unstructured":"Kalakoti, R., Bahsi, H., and N\u00f5mm, S. (2024, January 2\u20134). Explainable federated learning for botnet detection in IoT networks. Proceedings of the 2024 IEEE International Conference on Cyber Security and Resilience (CSR), London, UK.","DOI":"10.1109\/CSR61664.2024.10679348"},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"117734","DOI":"10.1109\/ACCESS.2021.3107337","article-title":"An ensemble multi-view federated learning intrusion detection for IoT","volume":"9","author":"Attota","year":"2021","journal-title":"IEEE Access"},{"key":"ref_52","doi-asserted-by":"crossref","first-page":"121000","DOI":"10.1016\/j.eswa.2023.121000","article-title":"Fed-anids: Federated learning for anomaly-based network intrusion detection systems","volume":"234","author":"Idrissi","year":"2023","journal-title":"Expert Syst. Appl."},{"key":"ref_53","doi-asserted-by":"crossref","unstructured":"Brecko, A., Kajati, E., Koziorek, J., and Zolotova, I. (2022). Federated learning for edge computing: A survey. Appl. Sci., 12.","DOI":"10.3390\/app12189124"},{"key":"ref_54","doi-asserted-by":"crossref","unstructured":"Arafeh, M., Hammoud, A., Otrok, H., Mourad, A., Talhi, C., and Dziong, Z. (2022, January 4\u20138). Independent and identically distributed (IID) data assessment in federated learning. Proceedings of the GLOBECOM 2022-2022 IEEE Global Communications Conference, Rio de Janeiro, Brazil.","DOI":"10.1109\/GLOBECOM48099.2022.10001718"},{"key":"ref_55","unstructured":"Kim, M., Saad, W., Debbah, M., and Hong, C.S. (2024). SpaFL: Communication-Efficient Federated Learning with Sparse Models and Low Computational Overhead. arXiv."},{"key":"ref_56","doi-asserted-by":"crossref","unstructured":"Soltani, B., Zhou, Y., Haghighi, V., and Lui, J. (2023, January 19\u201325). A Survey of Federated Evaluation in Federated Learning. Proceedings of the Thirty-Second International Joint Conference on Artificial Intelligence (IJCAI-23), Macao, China.","DOI":"10.24963\/ijcai.2023\/758"},{"key":"ref_57","doi-asserted-by":"crossref","unstructured":"Soudan, B., Abbas, S., Kubba, A., Abu Waraga, O., Abu Talib, M., and Nasir, Q. (2024). Scalability and Performance Evaluation of Federated Learning Frameworks: A Comparative Analysis. Res. Sq.","DOI":"10.21203\/rs.3.rs-3934159\/v1"},{"key":"ref_58","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3687124","article-title":"Survey on Federated Learning for Intrusion Detection System: Concept, Architectures, Aggregation Strategies, Challenges, and Future Directions","volume":"57","author":"Khraisat","year":"2024","journal-title":"ACM Comput. Surv."},{"key":"ref_59","doi-asserted-by":"crossref","first-page":"16","DOI":"10.1007\/s43926-025-00108-6","article-title":"Securing federated learning: A defense strategy against targeted data poisoning attack","volume":"5","author":"Khraisat","year":"2025","journal-title":"Discover Internet Things"},{"key":"ref_60","doi-asserted-by":"crossref","first-page":"635","DOI":"10.1109\/TCSS.2024.3496746","article-title":"Robust Cyber Threat Intelligence Sharing using Federated Learning for Smart Grids","volume":"12","author":"Rahman","year":"2024","journal-title":"IEEE Trans. Comput. Soc. Syst."},{"key":"ref_61","doi-asserted-by":"crossref","first-page":"395","DOI":"10.1016\/j.future.2021.10.023","article-title":"Federated intelligence of anomaly detection agent in IoTMD-enabled Diabetes Management Control System","volume":"128","author":"Astillo","year":"2022","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_62","unstructured":"Serpanos, D., and Xenos, G. (2023, January 12\u201315). Federated Learning in Malware Detection. Proceedings of the 2022 IEEE 27th International Conference on Emerging Technologies and Factory Automation (ETFA), Sinaia, Romania."},{"key":"ref_63","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1016\/j.future.2023.05.021","article-title":"Privacy-preserving malware detection in Android-based IoT devices through federated Markov chains","volume":"148","author":"Farsimadan","year":"2023","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_64","doi-asserted-by":"crossref","first-page":"109139","DOI":"10.1016\/j.compeleceng.2024.109139","article-title":"SIM-FED: Secure IoT malware detection model with federated learning","volume":"116","author":"Nobakht","year":"2024","journal-title":"Comput. Electr. Eng."},{"key":"ref_65","doi-asserted-by":"crossref","unstructured":"Babbar, H., Rani, S., and Boulila, W. (2024). NGMD: Next generation malware detection in federated server with deep neural network model for autonomous networks. Sci. Rep., 14.","DOI":"10.1038\/s41598-024-61298-7"},{"key":"ref_66","doi-asserted-by":"crossref","first-page":"103651","DOI":"10.1016\/j.rineng.2024.103651","article-title":"Graph representation federated learning for malware detection in Internet of health things","volume":"25","author":"Amjath","year":"2025","journal-title":"Results Eng."},{"key":"ref_67","doi-asserted-by":"crossref","unstructured":"Markovic, T., Leon, M., Buffoni, D., and Punnekkat, S. (2022, January 17\u201320). Random forest based on federated learning for intrusion detection. Proceedings of the IFIP Advances in Information and Communication Technology, Crete, Greece.","DOI":"10.1007\/978-3-031-08333-4_11"},{"key":"ref_68","doi-asserted-by":"crossref","unstructured":"Alazab, A., Khraisat, A., Singh, S., and Jan, T. (2023). Enhancing privacy-preserving intrusion detection through federated learning. Electronics, 12.","DOI":"10.3390\/electronics12163382"},{"key":"ref_69","unstructured":"Rose, J.D. (2024, January 11\u201312). Next-Gen Phishing Detection System Based on Federated Learning Integrated CNN-LSTM for SMS Communication. Proceedings of the 2024 5th International Conference on Intelligent Communication Technologies and Virtual Mobile Networks (ICICV), Tirunelveli, India."},{"key":"ref_70","doi-asserted-by":"crossref","first-page":"124896","DOI":"10.1016\/j.eswa.2024.124896","article-title":"SENTINEY: Securing ENcrypted mulTI-party computatIoN for Enhanced data privacY and phishing detection","volume":"256","author":"Hendaoui","year":"2024","journal-title":"Expert Syst. Appl."},{"key":"ref_71","doi-asserted-by":"crossref","unstructured":"Sidhpura, J., Shah, P., Veerkhare, R., and Godbole, A. (2023). FedSpam: Privacy Preserving SMS Spam Prediction. Communications in Computer and Information Science, Springer.","DOI":"10.1007\/978-981-99-1645-0_5"},{"key":"ref_72","unstructured":"Vats, S., Shastri, S., and Mehta, S. (2024, January 24\u201328). Federated Learning for SMS Spam Detection: A Privacy-Focused Approach. Proceedings of the 2022 13th International Conference on Computing Communication and Networking Technologies (ICCCNT), Kamand, India."},{"key":"ref_73","doi-asserted-by":"crossref","unstructured":"Srinivasa Rao, D., and Ajith Jubilson, E. (2023). SMS Spam Detection using Federated Learning. Proceedings of International Conference on Computational Intelligence and Data Engineering, Springer. Lecture Notes on Data Engineering and Communications Technologies.","DOI":"10.1007\/978-981-99-0609-3_39"},{"key":"ref_74","doi-asserted-by":"crossref","unstructured":"Ul Haq, I., Black, P., Gondal, I., Kamruzzaman, J., Watters, P., and Kayes, A. (2022, January 28\u201330). Spam email categorization with nlp and using federated deep learning. Proceedings of the International Conference on Advanced Data Mining and Applications, Brisbane, QLD, Australia.","DOI":"10.1007\/978-3-031-22137-8_2"},{"key":"ref_75","doi-asserted-by":"crossref","unstructured":"Anh, H.Q., Anh, P.T., Nguyen, P.S., and Hung, P.D. (2024, January 20\u201322). Federated Learning for Vietnamese SMS Spam Detection Using Pre-trained PhoBERT. Proceedings of the International Conference on Intelligent Data Engineering and Automated Learning, Valencia, Spain.","DOI":"10.1007\/978-3-031-77731-8_24"},{"key":"ref_76","unstructured":"Zhou, H., and Sheng, Z. (2023, January 22\u201324). A Federated Learning Based Botnet Detection Method for Industrial Internet of Things. Proceedings of the 7th International Conference on Cyber Security and Information Engineering, Putrajaya, Malaysia."},{"key":"ref_77","doi-asserted-by":"crossref","first-page":"1","DOI":"10.61185\/SMIJ.2023.22105","article-title":"Protecting IoT Devices from BotNet Threats: A Federated Machine Learning Solution","volume":"2","author":"Metwaly","year":"2023","journal-title":"Sustain. Mach. Intell. J."},{"key":"ref_78","doi-asserted-by":"crossref","unstructured":"de Caldas Filho, F.L., Soares, S.C.M., Oroski, E., de Oliveira Albuquerque, R., Da Mata, R.Z.A., De Mendon\u00e7a, F.L.L., and de Sousa J\u00fanior, R.T. (2023). Botnet detection and mitigation model for IoT networks using federated learning. Sensors, 23.","DOI":"10.3390\/s23146305"},{"key":"ref_79","doi-asserted-by":"crossref","unstructured":"Popoola, S., Ande, R., Atayero, A., Hammoudeh, M., Gui, G., and Adebisi, B. (2023). Optimized Lightweight Federated Learning for Botnet Detection in Smart Critical Infrastructure. TechRxiv.","DOI":"10.36227\/techrxiv.23620674"},{"key":"ref_80","doi-asserted-by":"crossref","unstructured":"Zhang, J., Liang, S., Ye, F., Hu, R.Q., and Qian, Y. (June, January 28). Towards Detection of Zero-Day Botnet Attack in IoT Networks Using Federated Learning. Proceedings of the ICC 2022\u2014IEEE International Conference on Communications, Rome, Italy.","DOI":"10.1109\/ICC45041.2023.10279423"},{"key":"ref_81","doi-asserted-by":"crossref","first-page":"103540","DOI":"10.1016\/j.adhoc.2024.103540","article-title":"A federated learning-based zero trust intrusion detection system for Internet of Things","volume":"162","author":"Javeed","year":"2024","journal-title":"Ad Hoc Netw."},{"key":"ref_82","doi-asserted-by":"crossref","unstructured":"Consul, P., Joshi, N., Budhiraja, I., Biswas, S., Kumar, N., Sharma, S., and Abraham, A. (2024, January 4\u20138). A Reliable Zero-Trust Network for Task Offloading in Vehicular Systems Using an Asynchronous Federated Learning Approach in 6G. Proceedings of the SIGCOMM Workshop on Zero Trust Architecture for Next Generation Communications, Sydney, NSW, Australia.","DOI":"10.1145\/3672200.3673877"},{"key":"ref_83","doi-asserted-by":"crossref","unstructured":"Pokhrel, S.R., Yang, L., Rajasegarar, S., and Li, G. (2024, January 4\u20138). Robust Zero Trust Architecture: Joint Blockchain based Federated Learning and Anomaly Detection based Framework. Proceedings of the ZTA-NextGen \u201924: Proceedings of the SIGCOMM Workshop on Zero Trust Architecture for Next Generation Communications, Sydney, NSW, Australia.","DOI":"10.1145\/3672200.3673878"},{"key":"ref_84","doi-asserted-by":"crossref","unstructured":"Bandara, E., Liang, X., Shetty, S., Mukkamala, R., Rahman, A., and Keong, N.W. (2022, January 20\u201323). Skunk\u2014A blockchain and zero trust security enabled federated learning platform for 5G\/6G network slicing. Proceedings of the 2022 19th Annual IEEE International Conference on Sensing, Communication, and Networking (SECON), Stockholm, Sweden.","DOI":"10.1109\/SECON55815.2022.9918536"},{"key":"ref_85","first-page":"7849","article-title":"Blockchain-Enabled Federated Learning for Prevention of Power Terminals Threats in IoT Environment Using Edge Zero-Trust Model","volume":"80","author":"Rizwan","year":"2023","journal-title":"J. Supercomput."},{"key":"ref_86","doi-asserted-by":"crossref","first-page":"103692","DOI":"10.1016\/j.compind.2022.103692","article-title":"Light-weight federated learning-based anomaly detection for time-series data in industrial control systems","volume":"140","author":"Truong","year":"2022","journal-title":"Comput. Ind."},{"key":"ref_87","doi-asserted-by":"crossref","first-page":"6008904","DOI":"10.1109\/LSENS.2024.3421567","article-title":"Federated Learning-Based Anomaly Detection for Environment Monitoring Sensor Networks","volume":"8","author":"Yan","year":"2024","journal-title":"IEEE Sens. Lett."},{"key":"ref_88","doi-asserted-by":"crossref","first-page":"53854","DOI":"10.1109\/ACCESS.2022.3173288","article-title":"Federated learning-based explainable anomaly detection for industrial control systems","volume":"10","author":"Huong","year":"2022","journal-title":"IEEE Access"},{"key":"ref_89","doi-asserted-by":"crossref","first-page":"107562","DOI":"10.1016\/j.future.2024.107562","article-title":"SeCTIS: A framework to Secure CTI Sharing","volume":"164","author":"Arikkat","year":"2025","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_90","doi-asserted-by":"crossref","first-page":"102074","DOI":"10.1016\/j.inffus.2023.102074","article-title":"FL-CTIF: A Federated Learning Based CTI Framework Based on Information Fusion for Secure IIoT","volume":"102","author":"Salim","year":"2023","journal-title":"Inf. Fusion"},{"key":"ref_91","doi-asserted-by":"crossref","unstructured":"Verma, P., De Leon, M.P., Breslin, J.G., and O\u2019Shea, D. (2023, January 26\u201330). FedTIU: Securing Virtualized PLCs Against DDoS Attacks Using a Federated Learning Enabled Threat Intelligence Unit. Proceedings of the 2023 IEEE International Conference on Smart Computing (SMARTCOMP), Nashville, TN, USA.","DOI":"10.1109\/SMARTCOMP58114.2023.00058"},{"key":"ref_92","doi-asserted-by":"crossref","unstructured":"Kumar, P., Gupta, G.P., Tripathi, R., Garg, S., and Hassan, M.M. (2021). DLTIF: Deep Learning-Driven Cyber Threat Intelligence Modeling and Identification Framework in IoT-Enabled Maritime Transportation Systems. IEEE Trans. Intell. Transp. Syst., 1\u201310.","DOI":"10.1109\/TITS.2021.3122368"},{"key":"ref_93","first-page":"1459","article-title":"Adaptive Secure Threat Intelligence Infrastructure for AI and the Edge","volume":"71","author":"Balaram","year":"2022","journal-title":"Math. Stat. Eng. Appl."},{"key":"ref_94","doi-asserted-by":"crossref","unstructured":"Kazmi, S.H.A., Qamar, F., Hassan, R., Nisar, K., Dahnil, D.P.B., and Al-Betar, M.A. (2023, January 6\u20138). Threat Intelligence with Non-IID Data in Federated Learning enabled Intrusion Detection for SDN: An Experimental Study. Proceedings of the 2023 24th International Arab Conference on Information Technology (ACIT), Ajman, United Arab Emirates.","DOI":"10.1109\/ACIT58888.2023.10453867"},{"key":"ref_95","unstructured":"Kazmi, S.H.A., Hassan, R., Qamar, F., Nisar, K., and Dahnil, D.P. (2024, January 21\u201322). Threat Intelligence in IoMTs with Federated Learning using Non-IID Data: An Experimental Analysis. Proceedings of the 2024 IEEE 7th International Symposium on Telecommunication Technologies (ISTT), Langkawi Island, Malaysia."},{"key":"ref_96","doi-asserted-by":"crossref","unstructured":"Fereidooni, H., Dmitrienko, A., Rieger, P., Miettinen, M., Sadeghi, A.R., and Madlener, F. (2022, January 24\u201328). FedCRI: Federated Mobile Cyber-Risk Intelligence. Proceedings of the NDSS, San Diego, CA, USA.","DOI":"10.14722\/ndss.2022.23153"},{"key":"ref_97","doi-asserted-by":"crossref","unstructured":"Saura, P.F., Gil, J.F.M., Bernab\u00e9, J.B., and Skarmeta, A. (2023). Privacy-Preserving Cyber Threat Information Sharing Leveraging FL-Based Intrusion Detection in the Financial Sector. Communications in Computer and Information Science, Springer.","DOI":"10.1007\/978-3-031-36096-1_4"},{"key":"ref_98","doi-asserted-by":"crossref","first-page":"109604","DOI":"10.1016\/j.comnet.2023.109604","article-title":"BFLS: Blockchain and Federated Learning for sharing threat detection models as Cyber Threat Intelligence","volume":"224","author":"Jiang","year":"2023","journal-title":"Comput. Netw."},{"key":"ref_99","unstructured":"Ongun, T., Boboila, S., Oprea, A., Eliassi-Rad, T., Hiser, J., and Davidson, J. (2023). CELEST: Federated learning for globally coordinated threat detection. arXiv."},{"key":"ref_100","doi-asserted-by":"crossref","unstructured":"Bouharoun, M., Taghdouti, B., and Erradi, M. (2023, January 22\u201324). A Peer to Peer Federated Graph Neural Network for Threat Intelligence. Proceedings of the International Conference on Networked Systems, Benguerir, Morocco.","DOI":"10.1007\/978-3-031-37765-5_3"},{"key":"ref_101","doi-asserted-by":"crossref","unstructured":"Bandara, E., Shetty, S., Mukkamala, R., Rahaman, A., and Liang, X. (2022, January 18\u201320). Luunu\u2014Blockchain, misp, model cards and federated learning enabled cyber threat intelligence sharing platform. Proceedings of the 2022 Annual Modeling and Simulation Conference (ANNSIM), San Diego, CA, USA.","DOI":"10.23919\/ANNSIM55834.2022.9859355"}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/17\/9\/409\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,9]],"date-time":"2025-10-09T18:41:58Z","timestamp":1760035318000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/17\/9\/409"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,8]]},"references-count":101,"journal-issue":{"issue":"9","published-online":{"date-parts":[[2025,9]]}},"alternative-id":["fi17090409"],"URL":"https:\/\/doi.org\/10.3390\/fi17090409","relation":{},"ISSN":["1999-5903"],"issn-type":[{"value":"1999-5903","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,8]]}}}