This document presents a framework called FedMalDe for detecting malware in IoT devices using semi-supervised federated learning, addressing issues of privacy and labeling reliability. It utilizes knowledge transfer to infer labels from unlabeled data and employs a subgraph aggregated capsule network to identify various malicious behaviors. Experiments on real-world data demonstrate FedMalDe's effectiveness in malware detection while ensuring privacy and robustness.