Due to the rapid growth in network traffic and increasing security threats, Intrusion Detection Systems (IDS) have become increasingly critical in the field of cyber security for providing secure communications against cyber adversaries. However, there exist many challenges for designing a robust, efficient and accurate IDS, especially when dealing with high-dimensional anomaly data with unforeseen and unpredictable attacks. In this paper, we propose a Robust Transformer-based Intrusion Detection System (RTIDS) reconstructing feature representations to make a trade-off between dimensionality reduction and feature retention in imbalanced datasets. The proposed method utilizes positional embedding technique to associate sequential information between features, then a variant stacked encoder-decoder neural network is used to learn low-dimensional feature representations from high-dimensional raw data. Furthermore, we apply self-attention mechanism to facilitate network traffic type classifications. Extensive experiments reveal the effectiveness of the proposed RTIDS on two publicly available real traffic intrusion detection datasets named CICIDS2017 and CIC-DDoS2019 with F1-Score of 99.17% and 98.48% respectively. A comparative study with classical machine learning algorithm support vector machine (SVM) and deep learning algorithms that include recurrent neural network (RNN), fuzzy neural network (FNN), and long short-term memory network (LSTM) is conducted to demonstrate the validity of the proposed method.

With the rapid development of Internet of Things (IoT), data generated by IoT devices are also increasing exponentially. The edge computing has alleviated the problems of limited network and transmission delay when processing tasks of IoT devices in traditional cloud computing. And with the popularity of deep learning, more and more terminal devices are embedded with AI (Artificial Intelligence) processors for higher processing capability at the edge. However, the problems of Deep Learning task offloading in heterogeneous edge computing environment have not been fully investigated. In this paper, a multi-model edge computing offloading framework is proposed, using NVIDIA Jetson edge devices (Jetson TX2, Jetson Xavier NX, and Jetson Nano) and GeForce RTX GPU servers (RTX3080 and RTX2080) to simulate the edge computing environment, and make binary computational offloading decisions for face detection tasks. We also introduce a Bayesian Optimization algorithm, namely MTPE (Modified Tree-structured Parzen Estimator), to reduce the total cost of edge computation within a time slot including response time and energy consumption, and ensure the accuracy requirements of face detection. In addition, we employ the Lyapunov model to obtain the harvesting energy between time slots to keep the energy queue stable. Experiments reveal that MTPE algorithm can achieve the globally optimal solution in fewer iterations. The total cost of multi-model edge computing framework is reduced by an average of 17.94% compared to a single-model framework. In contrast to the Double Deep Q-Network (DDQN), our proposed algorithm can decrease the computational consumption by 23.01% for obtaining the offloading decision.

Apache Spark is a popular open-source distributed data processing framework that can efficiently process massive amounts of data. It provides more than 180 configuration parameters for users to manually select the appropriate parameter values according to their own experience. However, due to the large number of parameters and the inherent correlation between them, manual tuning is very tedious. To solve the problem of tuning through personal experience, we designed and implemented a reinforcement-learning-based Spark configuration parameter optimizer. First, we trained a Spark application performance prediction model with deep neural networks, and verified the accuracy and effectiveness of the model from multiple perspectives. Second, in order to improve the search efficiency of better configuration parameters, we improved the Q-learning algorithm, and automatically set start and end states in each iteration of training, which effectively improves the agent’s poor performance in exploring better configuration parameters. Lastly, comparing our proposed configuration with the default configuration as the baseline, experimental results show that the optimized configuration gained an average performance improvement of 47%, 43%, 31%, and 45% for four different types of Spark applications, which indicates that our Spark configuration parameter optimizer could efficiently find the better configuration parameters and improve the performance of various Spark applications.

As the proliferation of Internet of Things (IoT) devices continues, vast amounts of data are being collected on various end devices. However, uploading these data to the cloud for centralized processing poses significant privacy risks. Federated learning (FL) addresses this issue by sharing model updates instead of raw data, which helps mitigate privacy concerns. Nonetheless, model updates transmitted in plaintext remain vulnerable to inference and reconstruction attacks. While homomorphic encryption (HE) can enhance security, traditional single-key schemes struggle to defend against collusion. Multikey HE schemes introduce substantial computational and communication overhead, making them impractical for resource-constrained IoT environments. In this article, we propose a novel FL framework that integrates single-key HE, elliptic curve cryptography (ECC), and trusted execution environments (TEE) to achieve robust protection against collusion attacks. Specifically, we utilize ECC-based public key encryption to secure HE private key and employ secret sharing to split the ECC private key into multiple subsecrets, which are distributed to edge nodes, ensuring no single party can independently decrypt model updates. Additionally, we delegate the HE private key reconstruction and global model decryption processes to the TEE, and introduce a hash verification mechanism to ensure that only aggregated global model updates can be decrypted. Finally, we provide comprehensive security proofs and extensive experimental results, demonstrating the effectiveness and superiority of the proposed framework.