journal article·2023Open access

Detecting and Mitigating DDOS Attacks in SDNs Using Deep Neural Network

Gul Nawaz, Muhammad Junaid, Adnan Akhunzada, Abdullah Gani, Shamyla Nawazish, Asim Yaqub, Adeel Ahmed, Huma Ajab

Computers, Materials & Continua· Volume 77· Issue 2

Abstract

Distributed denial of service (DDoS) attack is the most common attack that obstructs a network and makes it unavailable for a legitimate user. We proposed a deep neural network (DNN) model for the detection of DDoS attacks in the Software-Defined Networking (SDN) paradigm. SDN centralizes the control plane and separates it from the data plane. It simplifies a network and eliminates vendor specification of a device. Because of this open nature and centralized control, SDN can easily become a victim of DDoS attacks. We proposed a supervised Developed Deep Neural Network (DDNN) model that can classify the DDoS attack traffic and legitimate traffic. Our Developed Deep Neural Network (DDNN) model takes a large number of feature values as compared to previously proposed Machine Learning (ML) models. The proposed DNN model scans the data to find the correlated features and delivers high-quality results. The model enhances the security of SDN and has better accuracy as compared to previously proposed models. We choose the latest state-of-the-art dataset which consists of many novel attacks and overcomes all the shortcomings and limitations of the existing datasets. Our model results in a high accuracy rate of 99.76% with a low false-positive rate and 0.065% low loss rate. The accuracy increases to 99.80% as we increase the number of epochs to 100 rounds. Our proposed model classifies anomalous and normal traffic more accurately as compared to the previously proposed models. It can handle a huge amount of structured and unstructured data and can easily solve complex problems.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Software-Defined Networks and 5G · Network Security and Intrusion Detection · Internet Traffic Analysis and Secure E-voting

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (45)

Show source-provided references
1. A survey and a layered taxonomy of software-defined networking10.1109/COMST.2014.2320094 ↗
2. Intelligent transmission control for efficient operations in SDN10.32604/cmc.2022.019766 ↗
3. A survey on openflow technologies10.1587/transcom.E97.B.375 ↗
4. Effectively handling network congestion and load balancing in software defined networking10.32604/cmc.2022.017715 ↗
5. SDN security: A survey
6. Defense mechanisms against DDoS attacks in SDN environment10.1109/MCOM.2017.1600970 ↗
7. Securing cloud, sdn and large data network environments from emerging DDoS attacks
8. Detection and defense of DDoS attack–based on deep learning in openflow-based SDN10.1002/dac.3497 ↗
9. Developing realistic distributed denial of service (DDoS) attack dataset and taxonomy
10. A deep learning approach for network intrusion detection system
11. Detection of distributed denial of service attacks using machine learning algorithms in software defined networks
12. DDoS attacks detection and mitigation in SDN using machine learning
13. Detecting DDoS attacks in software-defined networks through feature selection methods and machine learning models10.3390/su12031035 ↗
14. Advanced support vector machine (ASVM) based detection for distributed denial of service (DDoS) attack on software defined networking10.1155/2019/8012568 ↗
15. DDoS detection and analysis in SDN-based environment using support vector machine classifier
16. A hybrid model for load balancing in cloud using file type formatting10.1109/ACCESS.2020.3003825 ↗
17. Modeling an optimized approach for load balancing in cloud10.1109/ACCESS.2020.3024113 ↗
18. Agile support vector machine for energy-efficient resource allocation in IoT-oriented cloud using PSO10.1145/3433541 ↗
19. Enhancing cloud performance using file format classifications10.32604/cmc.2022.019962 ↗
20. Smart agriculture cloud using AI based techniques10.3390/en14165129 ↗
21. Evaluation of framework for the comparative analysis of symmetric block ciphers
22. An indigenous solution for SYN flooding
23. ISDSDN: Mitigating SYN flood attacks in software defined networks10.1007/s10922-020-09540-1 ↗
24. SAFETY: Early detection and mitigation of TCP SYN flood utilizing entropy in SDN10.1109/TNSM.2018.2861741 ↗
25. A DDoS attack detection and defense scheme using time-series analysis for SDN10.1016/j.jisa.2020.102587 ↗
26. Leveraging machine learning approach to setup software-defined network (SDN) controller rules during DDoS attack
27. Fault-resilience for bandwidth management in industrial software-defined networks10.1109/TNSE.2021.3104499 ↗
28. CANintelliIDS: Detecting in-vehicle intrusion attacks on a controller area network using CNN and attention-based GRU10.1109/TNSE.2021.3059881 ↗
29. Temporal weighted veraging for asynchronous federated intrusion detection systems
30. Supervised learning-based DDoS attacks detection: Tuning hyperparameters10.4218/etrij.2019-0156 ↗
31. Deep learning based ensemble convolutional neural network solution for distributed denial of service detection in SDNs
32. A programmable and virtualized network and IT infrastructure for the internet of things: How can NFV & SDN help for facing the upcoming challenges
33. A survey of software-defined networking: Past, present, and future of programmable networks10.1109/SURV.2014.012214.00180 ↗
34. Software-defined networking: The new norm for networks
35. An opennaas based sdn framework for dynamic qos control
36. Using mininet for emulation and prototyping software-defined networks
37. A. K. Maddala, “Modeling of openflow based software defined networks using mininet,” M.S. Thesis, Dept. Electron. Eng., Iowa State University, Ames, Iowa, USA, 2019.10.31274/cc-20240624-1012 ↗
38. Ryu controller’s scalability experiment on software defined networks
39. Nilsson · The Quest for Artificial Intelligence · 2009 · 1
40. Multilayer perceptron neural network (MLPs) for analyzing the properties of jordan oil shale
41. A survey of deep neural network architectures and their applications10.1016/j.neucom.2016.12.038 ↗
42. Characterization of tor traffic using time based features
43. An overview of principal component analysis10.4236/jsip.2013.43B031 ↗
44. kerasR: R interface to the keras deep learning library10.21105/joss.00296 ↗
45. TensorFlow at scale: Performance and productivity analysis of distributed training with horovod, MLSL, and cray PE ML10.1002/cpe.4989 ↗