Security risk identification for industrial internet of things based on dynamic clustering federated learning

Zengshuo ZHOU, Shangjing LIN, Weifeng SHAN, Weimin WU, Jilong LI, Churan ZHOU, Yuchen ZHUANG

Journal of Tsinghua University(Science and Technology) ›› 2026, Vol. 66 ›› Issue (9) : 1746-1755.

PDF(3019 KB)
PDF(3019 KB)
Journal of Tsinghua University(Science and Technology) ›› 2026, Vol. 66 ›› Issue (9) : 1746-1755. DOI: 10.16511/j.cnki.qhdxxb.2026.27.036
Public Safety

Security risk identification for industrial internet of things based on dynamic clustering federated learning

Author information +
History +

Abstract

Objective: Industrial Internet of Things (IIoT) has emerged as a critical infrastructure for safety monitoring in high-risk industrial environments such as petrochemical plants and power systems. Real-time identification of safety risks, including abnormal behaviors and hazardous events, is essential for ensuring operational reliability and preventing accidents. Federated learning (FL), a distributed machine learning paradigm, enables collaborative model training across multiple edge devices while preserving data privacy. However, its application in IIoT-based safety risk identification still faces considerable challenges, including unreliable edge nodes, heterogeneous computing and communication capabilities, and high communication overhead due to frequent parameter exchanges. These issues lead to degraded model accuracy, reduced system robustness, and increased latency. To address these limitations, this paper proposes a dynamic clustering framework for FL (DCF-FL) to improve the reliability and efficiency of safety risk identification in IIoT environments. Methods: The proposed DCF-FL framework integrates three key components: a reputation evaluation mechanism, dynamic cluster head selection, and joint optimization of device selection and resource allocation. First, a comprehensive reputation evaluation mechanism based on subjective logic is designed to assess the trustworthiness of edge devices. This mechanism incorporates multiple factors—such as data contribution, local model accuracy, and channel conditions—to dynamically select reliable devices as cluster heads, thereby enhancing training robustness. Second, the FL process is organized into dynamically formed clusters, where the cluster head coordinates local training and model aggregation. A dynamic replacement strategy for cluster heads is introduced to mitigate single-point failures and adapt to varying network conditions. Third, the joint optimization problem of device participation and resource allocation is formulated as a mixed-integer nonlinear programming problem, which considers communication and computation costs while maintaining model accuracy. To efficiently solve this complex problem, a deep reinforcement learning (DRL)-based decoupling approach is adopted, where device selection and resource allocation are handled in separate stages. The DRL agent iteratively learns optimal decision policies through interaction with the environment, improving resource utilization and reducing the overall system cost. Results: Extensive simulations are conducted using public datasets, including BoWFire and UCF-Crime, along with a custom dataset for industrial safety scenarios. The experimental results demonstrate that DCF-FL substantially outperforms the FedAvg and FedProx baseline methods. In a typical scenario with 15 devices, DCF-FL's total communication and computation cost is reduced by 76.9% and 61.3%, respectively, compared with the baseline algorithms. Moreover, the DRL-based optimization achieves near-optimal performance, with only a 4.6% gap compared with the theoretical optimum obtained by traditional branch-and-cut methods, while maintaining much lower computational complexity. In terms of model performance, DCF-FL exhibits faster convergence and lower test loss, especially in non-independent and identically distributed data settings. The accuracy of risk identification remains consistently higher than that of the baseline methods across most training rounds, demonstrating the effectiveness of dynamic clustering and reputation-based node selection. Additionally, the proposed reputation mechanism effectively distinguishes unreliable devices, preventing their negative impact on model training and improving system stability. Conclusions: This paper presents DCF-FL, a novel FL framework tailored for industrial safety risk identification in IIoT environments. By integrating subjective logic-based reputation evaluation, adaptive cluster head selection, and DRL-driven resource optimization, DCF-FL effectively addresses the challenges of node unreliability and high resource consumption in traditional FL systems. The results indicate that DCF-FL achieves a favorable balance between model accuracy and system efficiency, making it suitable for resource-constrained and heterogeneous industrial scenarios. Future work will focus on further improving the stability of model accuracy under highly dynamic conditions and extending the framework to more complex real-world applications.

Key words

industrial internet of things / federated learning / node selection / resource allocation / reputation evaluation / security risk identification

Cite this article

Download Citations
Zengshuo ZHOU , Shangjing LIN , Weifeng SHAN , et al . Security risk identification for industrial internet of things based on dynamic clustering federated learning[J]. Journal of Tsinghua University(Science and Technology). 2026, 66(9): 1746-1755 https://doi.org/10.16511/j.cnki.qhdxxb.2026.27.036

References

1
胡钰林, 喻鑫岚, 高伟, 等. 低时延工业物联网中移动边缘计算的安全性与可靠性联合优化[J]. 电子与信息学报, 2025, 47 (10): 3492- 3504.
HU Y L , YU X L , GAO W , et al. Security and reliability-optimal offloading for mobile edge computing in low-latency industrial IoT[J]. Journal of Electronics & Information Technology, 2025, 47 (10): 3492- 3504.
2
王莹莹, 潘吴斌, 郑永爱. 工业物联网边缘计算任务卸载技术研究综述[J]. 物联网技术, 2025, 15 (20): 141- 145.
WANG Y Y , PAN W B , ZHENG Y A . Research review on edge computing task offloading technology in IIoT[J]. Internet of Things Technologies, 2025, 15 (20): 141- 145.
3
陈泉. 联邦学习在工业物联网设备安全防护中的应用研究[J]. 中国宽带, 2025, 21 (8): 61- 63.
CHEN Q . Research on the application of federated learning in equipment security protection of IIoT[J]. China Broadband, 2025, 21 (8): 61- 63.
4
邵汉舒. 基于设备管理工业物联网的设备异常监测与故障诊断方法研究[J]. 物联网技术, 2025, 15 (16): 87-90, 94.
SHAO H S . Research on equipment anomaly monitoring and fault diagnosis methods based on equipment-managed IIoT[J]. Internet of Things Technologies, 2025, 15 (16): 87-90, 94.
5
XIAO Y M , SHAO H D , LIN J , et al. BCE-FL: A secure and privacy-preserving federated learning system for device fault diagnosis under non-IID condition in IIoT[J]. IEEE Internet of Things Journal, 2024, 11 (8): 14241- 14252.
6
WANG S Y, LIU F F, XIA H L. Content-based vehicle selection and resource allocation for federated learning in IoV [C]//Proceedings of the 2021 IEEE Wireless Communications and Networking Conference Workshops (WCNCW). Nanjing, China: IEEE Press, 2021: 1-7. DOI: 10.1109/WCNCW49093.2021.9419986.
7
YIN B S, CHEN Z Y, TAO M X. Joint user scheduling and resource allocation for federated learning over wireless networks [C]//Proceedings of the 2020 IEEE Global Communications Conference. Taipei, China: IEEE Press, 2020: 1-6. DOI: 10.1109/GLOBECOM42002.2020.9348225.
8
严地宝. 基于强化学习的工业物联网任务优化及对抗攻击[D]. 成都: 电子科技大学, 2025. DOI: 10.27005/d.cnki.gdzku.2025.000087.
YAN D B. Task optimization and adversarial attacks in industrial internet of things based on reinforcement learning[D]. Chengdu: University of Electronic Science and Technology of China, 2025. DOI: 10.27005/d.cnki.gdzku.2025.000087.(inChinese)
9
ZHANG P Y , WANG C , JIANG C X , et al. Deep reinforcement learning assisted federated learning algorithm for data management of IIoT[J]. IEEE Transactions on Industrial Informatics, 2021, 17 (12): 8475- 8484.
10
CAO J Y, ZHANG K, WU F, et al. Learning cooperation schemes for mobile edge computing empowered Internet of vehicles [C]//Proceedings of the 2020 IEEE Wireless Communications and Networking Conference (WCNC). Seoul, Korea (South): IEEE Press, 2020: 1-6. DOI: 10.1109/WCNC45663.2020.9120493.
11
JØSANG A . Subjective logic: A formalism for reasoning under uncertainty[M]. Cham: Springer, 2016.
12
MCMAHAN B, MOORE E, RAMAGE D, et al. Communication-efficient learning of deep networks from decentralized data [C]//Proceedings of the 20th International Conference on Artificial Intelligence and Statistics. Fort Lauderdale, USA: PMLR, 2017, 54: 1273-1282.
13
MEHTA S, ANEJA A. Securing data privacy in machine learning: The FedAvg of federated learning approach [C]//Proceedings of the 20244th Asian Conference on Innovation in Technology (ASIANCON). Pimari Chinchwad, India: IEEE Press, 2024: 1-5. DOI: 10.1109/ASIANCON62057.2024.10838085.
14
HERLAMBANG S W, DEWANTA F, PURWANTO Y. Federated learning approaches for IoT intrusion detection based on FedAvg and FedProx on IID and non-IID data [C]//Proceedings of the 2025 International Conference on Information and Communication Technology (ICoICT). Bandung, Indonesia: IEEE Press, 2025: 1-6. DOI: 10.1109/ICoICT66265.2025.11192987.

RIGHTS & PERMISSIONS

All rights reserved. Unauthorized reproduction is prohibited.
PDF(3019 KB)

Accesses

Citation

Detail

Sections
Recommended

/