Privacy-Preserving Framework Using Isolation Forest for Security
TL;DR
A systematic literature review of 50 studies published between 2018 and 2026 that combine machine-learningbased anomaly detection with privacy-enhancing technologies finds that FL combined with the lightweight Isolation Forest is the approach most frequently associated with a favourable trade-off between detection quality, privacy protection and computational cost.
Abstract
The rapid growth of distributed computing paradigms, such as the Internet of Things (IoT), edge computing, cloud computing and cyber-physical systems, has made privacypreserving anomaly detection a pressing research challenge. This paper presents a systematic literature review, conducted following the PRISMA 2020 guidelines, of 50 studies published between 2018 and 2026 that combine machine-learningbased anomaly detection with privacy-enhancing technologies. We organise the literature along four axes: detection models (Isolation Forest, autoencoders, one-class SVM, graph neural networks and transformers), learning paradigms (centralized versus federated learning, FL), privacy mechanisms (homomorphic encryption, differential privacy, secure multi-party computation and zero-knowledge proofs), and integrity mechanisms based on blockchain. The reviewed applications span IoT security, healthcare, finance, industrial control, V2X networks, the metaverse and supply-chain management. Synthesising the reported evidence, the review finds that FL combined with the lightweight Isolation Forest (IF) is the approach most frequently associated with a favourable trade-off between detection quality, privacy protection and computational cost on resource-constrained edge devices, while hybrid designs that add differential privacy or homomorphic encryption offer stronger formal guarantees at a measurable cost in accuracy and latency. We critically discuss the methodological limitations of cross-study comparison, and we identify open challenges including non-IID data distributions, resistance to poisoning attacks, post-quantum cryptographic resilience and model explainability under privacy constraints. We close with future directions: adaptive privacy-budget mechanisms, federated unlearning for the right to be forgotten, and the integration of quantum-safe cryptographic primitives. All quantitative figures reported in this review are attributed to their original studies; no new experiments were performed.