arXiv: SoK: Federated Learning for Intrusion Detection in Vehicular Networks

This publication is a systematic academic review, not a regulatory change. It surveys the current state of federated learning techniques for detecting cyber intrusions in vehicular networks, such as vehicle-to-everything communications. The paper evaluates privacy, security, and performance trade-offs of these distributed machine learning models, highlighting vulnerabilities like poisoning attacks and data heterogeneity that could undermine safety and compliance in connected vehicle systems.

Organizations most affected include automotive manufacturers, telematics service providers, road infrastructure operators, and any entity deploying or relying on connected vehicle fleets within the EU. Compliance teams in these sectors should note that while the paper does not introduce new law, it signals emerging technical risks that may fall under existing frameworks like the EU AI Act, GDPR, and the UN Regulation on cybersecurity for vehicles. The review underscores that federated learning, while privacy-preserving, introduces novel attack surfaces that current compliance controls may not fully address.

Compliance teams should immediately review their current intrusion detection systems to assess whether they use federated learning. If so, they must evaluate whether model training and deployment include robust safeguards against adversarial manipulation and data leakage. Next, align these technical controls with the risk management and transparency obligations under the AI Act, particularly for high-risk AI systems. Finally, document these assessments and prepare to update data protection impact assessments to reflect the unique privacy and security challenges of federated learning in vehicular networks.