Federated Anomaly Detection for Multi-Tenant Cloud Platforms with Personalized Modeling

TL;DR

This paper introduces a federated learning-based anomaly detection approach for multi-tenant cloud platforms that preserves privacy, adapts to tenant-specific patterns, and improves detection accuracy using personalized models and Mahalanobis distance.

Contribution

It presents a novel federated anomaly detection framework with personalized modeling for multi-tenant clouds, addressing privacy, heterogeneity, and adaptability challenges.

Findings

Outperforms existing models in Precision, Recall, and F1-Score.

Maintains stable performance across complex scenarios.

Demonstrates robustness under varying participation and noise levels.

Abstract

This paper proposes an anomaly detection method based on federated learning to address key challenges in multi-tenant cloud environments, including data privacy leakage, heterogeneous resource behavior, and the limitations of centralized modeling. The method establishes a federated training framework involving multiple tenants. Each tenant trains the model locally using private resource usage data. Through parameter aggregation, a global model is optimized, enabling cross-tenant collaborative anomaly detection while preserving data privacy. To improve adaptability to diverse resource usage patterns, a personalized parameter adjustment mechanism is introduced. This allows the model to retain tenant-specific feature representations while sharing global knowledge. In the model output stage, the Mahalanobis distance is used to compute anomaly scores. This enhances both the accuracy and stability of anomaly detection. The experiments use real telemetry data from a cloud platform to construct a simulated multi-tenant environment. The study evaluates the model's performance under varying participation rates and noise injection levels. These comparisons demonstrate the proposed method's robustness and detection accuracy. Experimental results show that the proposed method outperforms existing mainstream models across key metrics such as Precision, Recall, and F1-Score. It also maintains stable performance in various complex scenarios. These findings highlight the method's practical potential for intelligent resource monitoring and anomaly diagnosis in cloud computing environments.