journal article·2022Open access

HDLIDP: A Hybrid Deep Learning Intrusion Detection and Prevention Framework

Magdy M. Fadel, Sally M. El-Ghamrawy, Amr M. T. Ali-Eldin, Mohammed K. Hassan, Ali I. El-Desoky

Computers, Materials & Continua· Volume 73· Issue 2

Abstract

Distributed denial-of-service (DDoS) attacks are designed to interrupt network services such as email servers and webpages in traditional computer networks. Furthermore, the enormous number of connected devices makes it difficult to operate such a network effectively. Software defined networks (SDN) are networks that are managed through a centralized control system, according to researchers. This controller is the brain of any SDN, composing the forwarding table of all data plane network switches. Despite the advantages of SDN controllers, DDoS attacks are easier to perpetrate than on traditional networks. Because the controller is a single point of failure, if it fails, the entire network will fail. This paper offers a Hybrid Deep Learning Intrusion Detection and Prevention (HDLIDP) framework, which blends signature-based and deep learning neural networks to detect and prevent intrusions. This framework improves detection accuracy while addressing all of the aforementioned problems. To validate the framework, experiments are done on both traditional and SDN datasets; the findings demonstrate a significant improvement in classification accuracy.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Internet Traffic Analysis and Secure E-voting · Advanced Malware Detection Techniques

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (43)

Show source-provided references
1. A flexible and high-performance data center network topology10.1007/s11227-016-1836-2 ↗
2. Cloud computing review: Concepts, technology, challenges and security10.1504/IJCC.2017.083905 ↗
3. Software defined networking (SDN) challenges, issues and solution
4. Comparison of software defined networking with traditional networking
5. A low-storage precise IP traceback technique based on packet marking and logging
6. A hybrid approach for detecting, preventing, and traceback DDoS attacks
7. Detection and mitigation of DDoS attacks in SDN: A comprehensive review, research challenges and future directions
8. A review on genetic algorithm: Past, present, and future10.1007/s11042-020-10139-6 ↗
9. Khan · Optimization Algorithms-Methods and Applications · 2016 · 1 · 281
10. Research on particle swarm optimization of variable parameter
11. The whale optimization algorithm10.1016/j.advengsoft.2016.01.008 ↗
12. A review of detection approaches for distributed denial of service attacks10.1080/21642583.2017.1331768 ↗
13. A survey of machine learning techniques applied to software defined networking (SDN): Research issues and challenges10.1109/COMST.2018.2866942 ↗
14. TBE-Net: A three-branch embedding network with part-aware ability and feature complementary learning for vehicle re-identification10.1109/TITS.2021.3116045 ↗
15. RSOD: Real-time small object detection algorithm in UAV-based traffic monitoring
16. HDSL: A hybrid distributed single-packet low-storage IP traceback framework10.21608/bfemu.2021.211300 ↗
17. Survey of intrusion detection systems: Techniques, datasets and challenges10.1186/s42400-019-0038-7 ↗
18. Distributed denial of service, tribe flood network 2000, and stacheldraht, CIAC-2319
19. A practical approach to detection of distributed denial-of-service attacks using a hybrid detection method10.1016/j.compeleceng.2018.11.004 ↗
20. JESS: Joint entropy-based DDoS defense scheme in SDN10.1109/JSAC.2018.2869997 ↗
21. Towards an efficient DDoS detection scheme for software-defined networks10.1109/TLA.2018.8528249 ↗
22. An entropy-based distributed DDoS detection mechanism in software-defined networking
23. Statistical application fingerprinting for DDoS attack mitigation10.1109/TIFS.2018.2879616 ↗
24. TR-IDS: Anomaly-based intrusion detection through text-convolutional neural network and random forest10.1155/2018/4943509 ↗
25. A survey of data mining and machine learning methods for cyber security intrusion detection10.1109/COMST.2015.2494502 ↗
26. Machine learning based DDoS attack detection from source side in csloud
27. Critical review of machine learning approaches to apply big data analytics in DDoS forensics
28. A new multi classifier system using entropy-based features in DDoS attack detection
29. A deep learning approach for intrusion detection using recurrent neural networks10.1109/ACCESS.2017.2762418 ↗
30. A novel intrusion detection model for a massive network using convolutional neural networks10.1109/ACCESS.2018.2868993 ↗
31. An empirical study on network anomaly detection using convolutional neural networks
32. University of New Brunswick benchmark dataset, [Accessed: 28-Dec-2021]. Available: https://www.unb.ca/cic/datasets/nsl.html.
33. MAWILab dataset, [Accessed: 3-Jan-2022]. Available: http://www.fukuda-lab.org/mawilab/data.html.
34. Deep defense: Identifying DDoS attack via deep learning
35. Intrusion detection evaluation dataset (ISCXIDS2012), [Accessed: 23-Dec.-2021]. Available: https://www.unb.ca/cic/datasets/ids.html.
36. A review on various DPM traceback schemes to detect DDoS attacks10.17485/ijst/2016/v9i47/95630 ↗
37. Survey on packet marking algorithms for IP traceback10.13005/ojcst/10.02.36 ↗
38. A systematic study of online class imbalance learning with concept drift10.1109/TNNLS.2017.2771290 ↗
39. Mininet emulator software, [Accessed: 11-Jan.-2022]. Available: mininet.org.
40. Effect of data scaling methods on machine learning algorithms and model performance10.3390/technologies9030052 ↗
41. Experimental study and comparison of imbalance ensemble classifiers with dynamic selection strategy10.3390/e23070822 ↗
42. Intrusion detection of imbalanced network traffic based on machine learning and deep learning10.1109/ACCESS.2020.3048198 ↗
43. Automated DDOS attack detection in software defined networking10.1016/j.jnca.2021.103108 ↗