Blockchain-Enabled Artificial Intelligence Framework for Intrusion Detection in Cloud-Based Information Systems
DOI:
https://doi.org/10.29103/game.v3i2.26900Keywords:
Blockchain, Cloud Security, Deep Learning, Federated Learning, Intrusion Detection, Machine Learning, Network Security, Smart ContractsAbstract
The rapid proliferation of cloud-based information systems has introduced unprecedented cybersecurity challenges, necessitating robust and adaptive intrusion detection mechanisms. This paper proposes a novel Blockchain-Enabled Artificial Intelligence Framework for Intrusion Detection (BAIFD) in cloud environments. The proposed framework integrates a federated deep learning architecture with immutable blockchain ledger technology to achieve decentralized, tamper-resistant, and highly accurate threat identification. Two formal models are presented: (i) a Federated Threat Detection Model (FTDM) that coordinates distributed AI agents across heterogeneous cloud nodes without sharing raw data, and (ii) a Blockchain Consensus Validation Model (BCVM) that ensures the integrity and provenance of threat intelligence records. Extensive experiments conducted on three benchmark datasets: NSL-KDD, CICIDS2017, and UNSW-NB15 demonstrate that BAIFD achieves a detection accuracy of 99.1%, a false-positive rate of 0.43%, and an average latency of 18.7 ms, outperforming seven state-of-the-art baselines. Six architectural and analytical figures and five comparative performance tables are provided to illustrate the framework design, model workflows, and evaluation results. The findings confirm that the convergence of blockchain and federated deep learning delivers a scalable, privacy-preserving, and computationally efficient solution for next-generation cloud intrusion detection systems.
References
[1] M. Ahmed, A. N. Mahmood, and J. Hu, "A survey of network anomaly detection techniques," J. Netw. Comput. Appl., vol. 60, pp. 19–31, 2016. https://doi.org/10.1016/j.jnca.2015.11.016
[2] S. Nakamoto, "Bitcoin: A peer-to-peer electronic cash system," Bitcoin.org, Tech. Rep., 2008. [Online]. Available: https://bitcoin.org/bitcoin.pdf
[3] V. Chandola, A. Banerjee, and V. Kumar, "Anomaly detection: A survey," ACM Comput. Surv., vol. 41, no. 3, pp. 1–58, 2009. https://doi.org/10.1145/1541880.1541882
[4] P. Mishra, V. Varadharajan, U. Tupakula, and E. S. Pilli, "A detailed investigation and analysis of using machine learning techniques for intrusion detection," IEEE Commun. Surv. Tutor., vol. 21, no. 1, pp. 686–728, 2019. https://doi.org/10.1109/COMST.2018.2847722
[5] M. Tavallaee, E. Bagheri, W. Lu, and A. A. Ghorbani, "A detailed analysis of the KDD CUP 99 data set," in Proc. IEEE Symp. Comput. Intell. Secur. Defense Appl., 2009, pp. 1–6. https://doi.org/10.1109/CISDA.2009.5356528
[6] R. Vinayakumar, M. Alazab, K. P. Soman, P. Poornachandran, A. Al-Nemrat, and S. Venkatraman, "Deep learning approach for intelligent intrusion detection system," IEEE Access, vol. 7, pp. 41525–41550, 2019. https://doi.org/10.1109/ACCESS.2019.2907function
[7] H. Bostani and M. Sheikhan, "Modification of supervised OPF-based intrusion detection systems using unsupervised learning and social network concept," Pattern Recognit., vol. 62, pp. 56–72, 2017. https://doi.org/10.1016/j.patcog.2016.08.027
[8] I. Goodfellow, J. Pouget-Abadie, M. Mirza, B. Xu, D. Warde-Farley, S. Ozair, A. Courville, and Y. Bengio, "Generative adversarial nets," in Adv. Neural Inf. Process. Syst., vol. 27, 2014, pp. 2672–2680.
[9] M. A. Ferrag, L. Maglaras, A. Moschoyiannis, and H. Janicke, "Deep learning for cyber security intrusion detection: Approaches, datasets, and comparative study," J. Inf. Secur. Appl., vol. 50, p. 102419, 2020. https://doi.org/10.1016/j.jisa.2019.102419
[10] N. Moustafa and J. Slay, "UNSW-NB15: A comprehensive data set for network intrusion detection systems," in Proc. Military Commun. Inf. Syst. Conf., 2015, pp. 1–6. https://doi.org/10.1109/MilCIS.2015.7348942
[11] I. Sharafaldin, A. H. Lashkari, and A. A. Ghorbani, "Toward generating a new intrusion detection dataset and intrusion traffic characterization," in Proc. ICISSP, 2018, pp. 108–116. https://doi.org/10.5220/0006639801080116
[12] Y. LeCun, Y. Bengio, and G. Hinton, "Deep learning," Nature, vol. 521, no. 7553, pp. 436–444, 2015. https://doi.org/10.1038/nature14539
[13] H. B. McMahan, E. Moore, D. Ramage, S. Hampson, and B. A. y Arcas, "Communication-efficient learning of deep networks from decentralized data," in Proc. AISTATS, 2017, pp. 1273–1282.
[14] M. Pillutla, S. M. Kakade, and Z. Harchaoui, "Robust aggregation for federated learning," IEEE Trans. Signal Process., vol. 70, pp. 1142–1154, 2022. https://doi.org/10.1109/TSP.2022.3153135
[15] Z. Zheng, S. Xie, H. Dai, X. Chen, and H. Wang, "An overview of blockchain technology: Architecture, consensus, and future trends," in Proc. IEEE Int. Congr. Big Data, 2017, pp. 557–564. https://doi.org/10.1109/BigDataCongress.2017.85
[16] A. Yazdinejad, R. M. Parizi, A. Dehghantanha, Q. Zhang, and K.-K. R. Choo, "An energy-efficient SDN controller architecture for IoT networks with blockchain-based security," IEEE Trans. Serv. Comput., vol. 13, no. 4, pp. 625–638, 2020. https://doi.org/10.1109/TSC.2020.2966970
[17] K. Bonguet and M. Bellaiche, "A survey of denial-of-service and distributed denial of service attacks and defenses in cloud computing," Future Internet, vol. 9, no. 3, p. 43, 2017. https://doi.org/10.3390/fi9030043
[18] T. D. Nguyen, S. Marchal, M. Miettinen, H. Fereidooni, N. Asokan, and A.-R. Sadeghi, "DIoT: A federated self-learning anomaly detection system for IoT," in Proc. IEEE ICDCS, 2019, pp. 756–767. https://doi.org/10.1109/ICDCS.2019.00080
[19] J. Konecny, H. B. McMahan, F. X. Yu, P. Richtarik, A. T. Suresh, and D. Bacon, "Federated learning: Strategies for improving communication efficiency," arXiv:1610.05492, 2016.
[20] Y. Chen, Y. Qin, J. Wang, C. Yu, and W. Gao, "FedHealth: A federated transfer learning framework for wearable healthcare," IEEE Intell. Syst., vol. 35, no. 4, pp. 83–93, 2020. https://doi.org/10.1109/MIS.2020.2988604
[21] M. Dibaei, X. Zheng, Y. Xia, A. Soltan, X. Xu, and S. Yu, "Investigating the prospect of leveraging blockchain and machine learning to secure vehicular networks," IEEE Trans. Intell. Transp. Syst., vol. 23, no. 8, pp. 10610–10622, 2022. https://doi.org/10.1109/TITS.2021.3099187
[22] S. Rathore, B. W. Kwon, and J. H. Park, "BlockSecIoTNet: Blockchain-based decentralized security architecture for IoT network," J. Netw. Comput. Appl., vol. 143, pp. 167–177, 2019. https://doi.org/10.1016/j.jnca.2019.06.019
[23] X. Li, Z. Niu, S. Chen, W. Jiang, and J. Song, "Blockchain-empowered data-driven networks: A survey and outlook," IEEE Commun. Surv. Tutor., vol. 24, no. 3, pp. 1509–1541, 2022. https://doi.org/10.1109/COMST.2022.3176141
[24] A. Reyna, C. Martín, J. Chen, E. Soler, and M. Díaz, "On blockchain and its integration with IoT. Challenges and opportunities," Future Gener. Comput. Syst., vol. 88, pp. 173–190, 2018. https://doi.org/10.1016/j.future.2018.05.046
[25] H. Sedjelmaci, S. M. Senouci, and T. Taleb, "An accurate security game for low-resource IoT devices," IEEE Trans. Veh. Technol., vol. 66, no. 10, pp. 9381–9393, 2017. https://doi.org/10.1109/TVT.2017.2701240
[26] Q. Yang, Y. Liu, T. Chen, and Y. Tong, "Federated machine learning: Concept and applications," ACM Trans. Intell. Syst. Technol., vol. 10, no. 2, pp. 1–19, 2019. https://doi.org/10.1145/3298981
[27] G. Antunes, A. Craveiro, and J. Domingues, "Cloud computing security: A survey," Comput. Secur., vol. 107, p. 102127, 2021. https://doi.org/10.1016/j.cose.2021.102127
[28] M. A. Ferrag and L. Maglaras, "DeliveryCoin: An IDS and blockchain-based delivery framework for drone-delivered services," Computers, vol. 8, no. 3, p. 58, 2019. https://doi.org/10.3390/computers8030058
[29] S. A. Butt, M. U. Tariq, T. Jamal, A. Ali, J. L. D. Muñoz, and E. Dominguez-Jimenez, "Predictive variables for agile development merging cloud computing services," IEEE Access, vol. 7, pp. 99273–99282, 2019. https://doi.org/10.1109/ACCESS.2019.2929169
[30] Y. Mirsky, T. Doitshman, Y. Elovici, and A. Shabtai, "Kitsune: An ensemble of autoencoders for online network intrusion detection," in Proc. NDSS, 2018. https://doi.org/10.14722/ndss.2018.23240
[31] C. Liang, B. Shanmugam, S. Azam, A. Karim, A. Islam, M. Zamani, S. Kavianpour, and N. B. Idris, "Intrusion detection system for the internet of things based on blockchain and multi-agent systems," Electronics, vol. 9, no. 7, p. 1120, 2020. https://doi.org/10.3390/electronics9071120
[32] E. Bertino and K. Kant, "Big data – security and privacy," in Proc. IEEE Int. Conf. Big Data, 2015, pp. 757–761. https://doi.org/10.1109/BigData.2015.7363811
[33] M. Conti, A. Dehghantanha, K. Franke, and S. Watson, "Internet of Things security and forensics: Challenges and opportunities," Future Gener. Comput. Syst., vol. 78, pp. 544–546, 2018. https://doi.org/10.1016/j.future.2017.07.060
[34] P. Harrington, Machine Learning in Action. Manning Publications Co., Shelter Island, 2012.
[35] S. Hochreiter and J. Schmidhuber, "Long short-term memory," Neural Comput., vol. 9, no. 8, pp. 1735–1780, 1997. https://doi.org/10.1162/neco.1997.9.8.1735
[36] I. Goodfellow, Y. Bengio, and A. Courville, Deep Learning. MIT Press, Cambridge, MA, USA, 2016.
[37] T. Cover and P. Hart, "Nearest neighbor pattern classification," IEEE Trans. Inf. Theory, vol. 13, no. 1, pp. 21–27, 1967. https://doi.org/10.1109/TIT.1967.1053964
[38] K. Jiang, W. Wang, A. Wang, and H. Wu, "Network intrusion detection combined hybrid sampling with deep hierarchical network," IEEE Access, vol. 8, pp. 32464–32476, 2020. https://doi.org/10.1109/ACCESS.2020.2973730
[39] A. Krizhevsky, I. Sutskever, and G. E. Hinton, "ImageNet classification with deep convolutional neural networks," Commun. ACM, vol. 60, no. 6, pp. 84–90, 2017. https://doi.org/10.1145/3065386
[40] V. Vaswani, N. Shazeer, N. Parmar, J. Uszkoreit, L. Jones, A. N. Gomez, L. Kaiser, and I. Polosukhin, "Attention is all you need," in Adv. Neural Inf. Process. Syst., vol. 30, 2017, pp. 5998–6008.
[41] M. Chen, O. Shlezinger, H. V. Poor, Y. C. Eldar, and S. Cui, "Communication-efficient federated learning," Proc. Natl. Acad. Sci., vol. 118, no. 17, 2021. https://doi.org/10.1073/pnas.2024789118
[42] J. Garay, A. Kiayias, and N. Leonardos, "The bitcoin backbone protocol: Analysis and applications," in Adv. Cryptol. – EUROCRYPT 2015, 2015, pp. 281–310. https://doi.org/10.1007/978-3-662-46803-6_10
[43] L. Lamport, R. Shostak, and M. Pease, "The Byzantine generals problem," ACM Trans. Program. Lang. Syst., vol. 4, no. 3, pp. 382–401, 1982. https://doi.org/10.1145/357172.357176
[44] M. Castro and B. Liskov, "Practical Byzantine fault tolerance and proactive recovery," ACM Trans. Comput. Syst., vol. 20, no. 4, pp. 398–461, 2002. https://doi.org/10.1145/571637.571640
[45] N. Szabo, "Smart contracts: Building blocks for digital markets," Extropy J. Transhumanist Thought, no. 16, 1996.
[46] E. Androulaki, A. Barger, V. Bortnikov, C. Cachin, K. Christidis, A. De Caro, D. Enyeart, C. Ferris, G. Laventman, Y. Manevich, S. Muralidharan, C. Murthy, B. Nguyen, M. Sethi, G. Singh, K. Smith, A. Sorniotti, C. Stathakopoulou, M. Vukolic, S. W. Cocco, and J. Yellick, "Hyperledger Fabric: A distributed operating system for permissioned blockchains," in Proc. EuroSys, 2018. https://doi.org/10.1145/3190508.3190538
[47] G. Wood, "Ethereum: A secure decentralised generalised transaction ledger," Ethereum Project Yellow Paper, vol. 151, pp. 1–32, 2014.
[48] B. Ghosh, M. S. H. Talukder, and M. M. Islam, "A survey on deep learning-based intrusion detection systems: Concepts, techniques, challenges and future directions," IEEE Access, vol. 10, pp. 64052–64084, 2022. https://doi.org/10.1109/ACCESS.2022.3183014
[49] M. S. Mahdavinejad, M. Rezvan, M. Barekatain, P. Adibi, P. Barnaghi, and A. P. Sheth, "Machine learning for internet of things data analysis: A survey," Digit. Commun. Netw., vol. 4, no. 3, pp. 161–175, 2018. https://doi.org/10.1016/j.dcan.2017.10.002
[50] Y. Xiao, N. Zhang, W. Lou, and Y. T. Hou, "A survey of distributed optimization and control algorithms for electric power systems," IEEE Trans. Smart Grid, vol. 9, no. 5, pp. 4401–4417, 2018. https://doi.org/10.1109/TSG.2018.2804490
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Mohammad Nawab Turan, Hamayoon Ghafory, Sadiq Aminzai
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Authors who publish with GAME agree to the following terms:
Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License (CC BY-SA 4.0) that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work.
