journal article·2023Open access

An IoT Environment Based Framework for Intelligent Intrusion Detection

Hamza Safwan, Zeshan Iqbal, Rashid Amin, Muhammad Attique Khan, Majed Alhaisoni, Abdullah Alqahtani, Ye Jin Kim, Byoungchol Chang

Computers, Materials & Continua· Volume 75· Issue 2

Abstract

Software-defined networking (SDN) represents a paradigm shift in network traffic management. It distinguishes between the data and control planes. APIs are then used to communicate between these planes. The controller is central to the management of an SDN network and is subject to security concerns. This research shows how a deep learning algorithm can detect intrusions in SDN-based IoT networks. Overfitting, low accuracy, and efficient feature selection is all discussed. We propose a hybrid machine learning-based approach based on Random Forest and Long Short-Term Memory (LSTM). In this study, a new dataset based specifically on Software Defined Networks is used in SDN. To obtain the best and most relevant features, a feature selection technique is used. Several experiments have revealed that the proposed solution is a superior method for detecting flow-based anomalies. The performance of our proposed model is also measured in terms of accuracy, recall, and precision. F1 rating and detection time Furthermore, a lightweight model for training is proposed, which selects fewer features while maintaining the model’s performance. Experiments show that the adopted methodology outperforms existing models.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Software-Defined Networks and 5G · Internet Traffic Analysis and Secure E-voting

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (33)

Show source-provided references
1. Network attack detection and defense: Security challenges and opportunities of software-defined networking
2. Security in software-defined networking: Threats and countermeasures
3. A deep learning approach to network intrusion detection using deep autoencoder
4. A botnets circumspection: The current threat landscape, and what we know so far10.3390/info10110337 ↗
5. A machine learning approach for DDoS (distributed denial of service) attack detection using multiple linear regressioN
6. Survey of countering DoS/DDoS attacks on SIP based VoIP networks10.3390/electronics9111827 ↗
7. The vulnerability of the production line using industrial IoT systems under ddos attack10.3390/electronics10040381 ↗
8. Ensemble machine learning approaches for webshell detection in internet of things environments
9. A survey of intrusion detection system (IDS) using OpenStack private cloud
10. Robust network intrusion detection scheme using long-short term memory based convolutional neural networks10.1007/s11036-020-01623-2 ↗
11. DeepIDS: Deep learning approach for intrusion detection in software defined networking10.3390/electronics9091533 ↗
12. Deep learning approaches for detecting DDoS attacks: A systematic review
13. Improving accuracy of intrusion detection model using PCA and optimized SVM10.20532/cit.2016.1002701 ↗
14. A novel two-stage deep learning model for efficient network intrusion detection10.1109/ACCESS.2019.2899721 ↗
15. Long short-term memory and fuzzy logic for anomaly detection and mitigation in software-defined network environment10.1109/ACCESS.2020.2992044 ↗
16. Network intrusion detection based on conditional wasserstein generative adversarial network and cost-sensitive stacked autoencoder10.1109/ACCESS.2020.3031892 ↗
17. LRDDoS attack detection on SD-IoT using random forest with logistic regression coefficient10.29207/resti.v6i2.3878 ↗
18. Multi-channel deep feature learning for intrusion detection10.1109/ACCESS.2020.2980937 ↗
19. Hybrid intrusion detection system based on the stacking ensemble of c5 decision tree classifier and one class support vector machine10.3390/electronics9010173 ↗
20. HCRNNIDS: Hybrid convolutional recurrent neural network-based network intrusion detection system10.3390/pr9050834 ↗
21. Intrusion detection model using machine learning algorithm on big data environment10.1186/s40537-018-0145-4 ↗
22. Network intrusion detection using oversampling technique and machine learning algorithms
23. A flexible SDN-based architecture for identifying and mitigating low-rate DDoS attacks using machine learning10.1109/ACCESS.2020.3019330 ↗
24. An intrusion detection method based on decision tree-recursive feature elimination in ensemble learning
25. An evolutionary SVM model for DDOS attack detection in software defined networks10.1109/ACCESS.2020.3009733 ↗
26. Designing a network intrusion detection system based on machine learning for software defined networks10.3390/fi13050111 ↗
27. Monsamp: A distributed sdn application for qos monitoring
28. Adaptive fuzzy cmac design for an omni-directional mobile robot
29. Analysis of dimensionality reduction techniques on internet of things data using machine learning10.1016/j.seta.2022.102304 ↗
30. Detection and prediction of traffic accidents using deep learning techniques
31. InSDN: A novel SDN intrusion dataset10.1109/ACCESS.2020.3022633 ↗
32. Application of random forest algorithm on feature subset selection and classification and regression
33. Lightweight DDoS flooding attack detection using NOX/OpenFlow10.1109/LCN.2010.5735752 ↗