journal article·2021Open access

Machine Learning Empowered Security Management and Quality of Service Provision in SDN-NFV Environment

Shumaila Shahzadi, Fahad Ahmad, Asma Basharat, Madallah Alruwaili, Saad Alanazi, Mamoona Humayun, Muhammad Rizwan, Shahid Naseem

Computers, Materials & Continua· Volume 66· Issue 3

Abstract

With the rising demand for data access, network service providers face the challenge of growing their capital and operating costs while at the same time enhancing network capacity and meeting the increased demand for access. To increase efficacy of Software Defined Network (SDN) and Network Function Virtualization (NFV) framework, we need to eradicate network security configuration errors that may create vulnerabilities to affect overall efficiency, reduce network performance, and increase maintenance cost. The existing frameworks lack in security, and computer systems face few abnormalities, which prompts the need for different recognition and mitigation methods to keep the system in the operational state proactively. The fundamental concept behind SDN-NFV is the encroachment from specific resource execution to the programming-based structure. This research is around the combination of SDN and NFV for rational decision making to control and monitor traffic in the virtualized environment. The combination is often seen as an extra burden in terms of resources usage in a heterogeneous network environment, but as well as it provides the solution for critical problems specially regarding massive network traffic issues. The attacks have been expanding step by step; therefore, it is hard to recognize and protect by conventional methods. To overcome these issues, there must be an autonomous system to recognize and characterize the network traffic’s abnormal conduct if there is any. Only four types of assaults, including HTTP Flood, UDP Flood, Smurf Flood, and SiDDoS Flood, are considered in the identified dataset, to optimize the stability of the SDN-NFV environment and security management, through several machine learning based characterization techniques like Support Vector Machine (SVM), K-Nearest Neighbors (KNN), Logistic Regression (LR) and Isolation Forest (IF). Python is used for simulation purposes, including several valuable utilities like the mine package, the open-source Python ML libraries Scikit-learn, NumPy, SciPy, Matplotlib. Few Flood assaults and Structured Query Language (SQL) injections anomalies are validated and effectively-identified through the anticipated procedure. The classification results are promising and show that overall accuracy lies between 87% to 95% for SVM, LR, KNN, and IF classifiers in the scrutiny of traffic, whether the network traffic is normal or anomalous in the SDN-NFV environment.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Software-Defined Networks and 5G · Advanced Malware Detection Techniques

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (38)

Show source-provided references
1. European Union’s general data protection regulation, 2018: A brief overview
2. Ensuring the confidentiality of nuclear information at cloud using modular encryption standard10.1155/2019/2509898 ↗
3. An intuitive study: Intrusion detection systems and anomalies, how AI can be used as a tool to enable the majority, in 5G era
4. A.Ahmad, “Evaluation of machine learning techniques for intrusion detection in software defined networking,” Faculty of Information Technology and Electrical Engineering, University of Oulu, 2020.
5. An openflow-based load balancing strategy in SDN10.32604/cmc.2020.06418 ↗
6. Analysis of network function virtualization and software defined virtualization10.30630/joiv.1.4.40 ↗
7. Network intrusion detection for IoT security based on learning techniques10.1109/COMST.2019.2896380 ↗
8. Allen · Artificial intelligence and national security · 2017
9. Software-defined networking approaches for link failure recovery: A survey10.3390/su12104255 ↗
10. Security of cloud computing using adaptive neural fuzzy inference system10.1155/2020/5352108 ↗
11. Network functions virtualization: The long road to commercial deployments10.1109/ACCESS.2019.2915195 ↗
12. ZSM security: Threat surface and best practices10.1109/MNET.001.1900273 ↗
13. Implementation of a real-time network traffic monitoring service with network functions virtualization10.1016/j.future.2018.08.050 ↗
14. Deployment of robust security scheme in SDN based 5G network over NFV enabled cloud environment
15. SDN/NFV-based mobile packet core network architectures: A survey10.1109/COMST.2017.2690823 ↗
16. A machine learning security framework for IoT systems10.1109/ACCESS.2020.2996214 ↗
17. Detection of DDoS attacks in software defined networks
18. Blockchain: Securing internet of medical things (IoMT)10.14569/IJACSA.2019.0100110 ↗
19. Towards provisioning of SDN/NFV-based security enablers for integrated protection of IoT systems
20. NFV-driven intrusion detection for smart manufacturing
21. Virtual IoT honeynets to mitigate cyberattacks in SDN/NFV-enabled IoT networks10.1109/JSAC.2020.2986621 ↗
22. Multi-layered intrusion detection and prevention in the SDN/NFV enabled cloud of 5G networks using AI-based defense mechanisms10.1016/j.comnet.2020.107364 ↗
23. Artificial intelligence and the ‘good society’: The US, EU, and UK approach
24. Holographic interface management in the age of artificial intelligence
25. Neuro-biological emotionally intelligent model for human inspired empathetic agents
26. Machine learning for cognitive network management10.1109/MCOM.2018.1700560 ↗
27. Guest editorial leveraging machine learning in SDN/NFV-based networks10.1109/JSAC.2019.2959197 ↗
28. The mouseworld, a security traffic analysis lab based on NFV/SDN
29. Cloud server security using bio-cryptography10.14569/IJACSA.2019.0100321 ↗
30. DELTA: A security assessment framework for software-defined networks
31. Nadeem · International Journal of Advanced Computer Science and Applications · 2019 · 10 · 28810.14569/IJACSA.2019.0100138 ↗
32. Integrated NFV/SDN architectures: A systematic literature review10.1145/3172866 ↗
33. SDN/NFV security framework for fog-to-things computing infrastructure
34. Survey of intrusion detection systems: Techniques, datasets and challenges10.1186/s42400-019-0038-7 ↗
35. A SDN-based intelligent prediction approach to power traffic identification and monitoring for smart network access
36. Evaluation of Apache spot’s machine learning capabilities in an SDN/NFV enabled environment
37. Detection of distributed denial of service attack using NSL-KDD dataset: A survey
38. A review of the advancement in intrusion detection datasets10.1016/j.procs.2020.03.330 ↗