Quantifying Catastrophic Forgetting in IoT Intrusion Detection Systems

2026-02-27 · Sourasekhar Banerjee, David Bergqvist, Salman Toor, Christian Rohner, Andreas Johnsson arxiv

Distribution shifts in attack patterns within RPL-based IoT networks pose a critical threat to the reliability and security of large-scale connected systems. Intrusion Detection Systems (IDS) trained on static datasets often fail to generalize to unseen threats and suffer from catastrophic forgetting when updated with new attacks. Ensuring continual adaptability of IDS is therefore essential for maintaining robust IoT network defence. In this focused study, we formulate intrusion detection as a domain continual learning problem and propose a method-agnostic IDS framework that can integrate diverse continual learning strategies. We systematically benchmark five representative approaches across multiple domain-ordering sequences using a comprehensive multi-attack dataset comprising 48 domains. Results show that continual learning mitigates catastrophic forgetting while maintaining a balance between plasticity, stability, and efficiency, a crucial aspect for resource-constrained IoT environments. Among the methods, Replay-based approaches achieve the best overall performance, while Synaptic Intelligence (SI) delivers near-zero forgetting with high training efficiency, demonstrating strong potential for stable and sustainable IDS deployment in dynamic IoT networks.

📄 PDF Abstract BibTeX arXiv:2603.00363

Code (0)

등록된 구현이 없습니다.

Tasks

Intrusion Detection Continual Learning

Adaptive Intrusion Detection for Evolving RPL IoT Attacks Using Incremental Learning

2025-11-14 · Sumeyye Bas, Kiymet Kaya, Elif Ak, Sule Gunduz Oguducu arxiv

The routing protocol for low-power and lossy networks (RPL) has become the de facto routing standard for resource-constrained IoT systems, but its lightweight design exposes critical vulnerabilities to a wide range of ro…

Incremental Learning Intrusion Detection

Does the Adam Optimizer Exacerbate Catastrophic Forgetting?

2021-02-15 · Dylan R. Ashley, Sina Ghiassian, Richard S. Sutton

Catastrophic forgetting remains a severe hindrance to the broad application of artificial neural networks (ANNs), however, it continues to be a poorly understood phenomenon. Despite the extensive amount of work on catast…

reinforcement-learning Reinforcement Learning (RL)

T-DFNN: An Incremental Learning Algorithm for Intrusion Detection Systems

2021-11-15 · IEEE Access 2021 11 · Mahendra Data, Masayoshi Aritsugi

Machine learning has recently become a popular algorithm in building reliable intrusion detection systems (IDSs). However, most of the models are static and trained using datasets containing all targeted intrusions. If n…

Incremental Learning Intrusion Detection

Shift Detection and Adaptation for Network Intrusion Detection

2025-08-20 · Ehssan Mousavipour, Andrey Dimanchev, Majid Ghaderi arxiv

Distribution shift, a change in the statistical properties of data over time, poses a critical challenge for deep learning anomaly detection systems. Existing anomaly detection systems often struggle to adapt to these sh…

Supervised Anomaly Detection Network Intrusion Detection Knowledge Distillation

RES-DARE: Failure-Aware Expert Adaptation and Rollback-Safe Self-Repair for Intrusion Detection

2026-07-02 · Rahil Aftab, Anyash Prasad, Soumya Mazumdar, Vineet Kumar Rakesh 외 arxiv

Intrusion detection systems are often trained under static benchmark conditions, although deployed network environments are affected by traffic drift, sensor noise, changing workloads, and evolving attack behaviour. Unde…

Intrusion Detection