Hybrid Deep Learning Approach for Automatic DoS/DDoS Attacks Detection in Software-Defined Networks
Source abstract
Abstract
This paper proposes a hybrid deep learning algorithm for detecting and defending against DoS/DDoS attacks in software-defined networks (SDNs). SDNs are becoming increasingly popular due to their centralized control and flexibility, but this also makes them a target for cyberattacks. Detecting DoS/DDoS attacks in SDNs is a challenging task due to the complex nature of the network traffic. To address this problem, we developed a hybrid deep learning approach that combines three types of deep learning algorithms. Our approach achieved high accuracy rates of 99.81% and 99.88% on two different datasets, as demonstrated through both reference-based analysis and practical experiments. Our work provides a significant contribution to the field of network security, particularly in the area of SDN. The proposed algorithm has the potential to enhance the security of SDNs and prevent DoS/DDoS attacks. This is important because SDNs are becoming increasingly important in today’s network infrastructure, and protecting them from attacks is crucial to maintaining the integrity and availability of network resources. Overall, our study demonstrates the effectiveness of a hybrid deep learning approach for detecting DoS/DDoS attacks in SDNs and provides a promising direction for future research in this area.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Advanced Malware Detection Techniques · Software-Defined Networks and 5G
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computer Engineering, Istanbul University-Cerrahpaşa, Istanbul 34320, Turkey
References (34)
Show source-provided references
1. Distributed denial of service attacks and defense mechanisms10.1088/1757-899X/612/5/052046 ↗
2. Denial of service attacks—An updated perspective10.1080/21642583.2016.1241193 ↗
3. Impact of defending strategy decision on DDoS attack10.1155/2021/6694383 ↗
4. Cimpanu, C. (2020, June 17). AWS Said It Mitigated a 2.3 Tbps DDoS Attack, the Largest Ever. ZDNet. Available online: https://www.zdnet.com/article/aws-said-it-mitigated-a-2-3-tbps-ddos-attack-the-largest-ever/.
5. Yadav, S.K., Suguna, P., and Velusamy, R.L. (2019, January 6–8). Entropy based mitigation of Distributed-Denial-of-Service (DDoS) attack on Control Plane in Software-Defined-Network (SDN). Proceedings of the 2019 10th International Conference on Computing, Communication and Networking Technologies (ICCCNT), Kanpur, India.10.1109/ICCCNT45670.2019.8944426 ↗
6. Dharma, N.G., Muthohar, M.F., Prayuda, J.A., Priagung, K., and Choi, D. (2015, January 19–21). Time-based DDoS detection and mitigation for SDN controller. Proceedings of the 2015 17th Asia-Pacific Network Operations and Management Symposium (APNOMS), Busan, Republic of Korea.10.1109/APNOMS.2015.7275389 ↗
7. A protocol for cluster confirmations of SDN controllers against DDoS attacks10.1016/j.compeleceng.2021.107265 ↗
8. Sun, W., Li, Y., and Guan, S. (2019, January 16–18). An improved method of DDoS attack detection for controller of SDN. Proceedings of the 2019 IEEE 2nd International Conference on Computer and Communication Engineering Technology (CCET), Beijing, China.10.1109/CCET48361.2019.8989356 ↗
9. Nugraha, B., and Murthy, R.N. (2020, January 10–12). Deep learning-based slow DDoS attack detection in SDN-based networks. Proceedings of the 2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), Leganes, Spain.10.1109/NFV-SDN50289.2020.9289894 ↗
10. Mathur, R., Gupta, C., Katewa, V., and Jat, D. (2021). Emerging Trends in Data Driven Computing and Communications, Springer.10.1007/978-981-16-3915-9 ↗
11. Graphon neural networks and the transferability of graph neural networks
12. Polat, H., Polat, O., and Cetin, A. (2020). Detecting DDoS attacks in software-defined networks through feature selection methods and machine learning models. Sustainability, 12.10.3390/su12031035 ↗
13. A GRU deep learning system against attacks in software defined networks10.1016/j.jnca.2020.102942 ↗
14. Farukee, M.B., Shabit, M.S., Haque, M., and Sattar, A.H.M. (2021). International Conference on Advances in Cyber Security, Springer.
15. An Efficient Hybridization of K-Means and Genetic Algorithm Based on Support Vector Machine for Cyber Intrusion Detection System
16. Balogun, B.F., Gbolagade, K.A., Arowolo, M.O., and Saheed, Y.K. (2021, January 13–16). A Hybrid Metaheuristic Algorithm for Features Dimensionality Reduction in Network Intrusion Detection System. Proceedings of the Computational Science and Its Applications–ICCSA 2021: 21st International Conference, Cagliari, Italy. Proceedings, Part IX 21.10.1007/978-3-030-87013-3_8 ↗
17. Ogundokun, R.O., Arowolo, M.O., Misra, S., and Awotunde, J.B. (2022). Blockchain Applications in the Smart Era, Springer International Publishing.
18. The record-breaking heat wave of June 2019 in Central Europe10.1002/asl.964 ↗
19. Software-defined DDoS detection with information entropy analysis and optimized deep learning10.1016/j.future.2021.11.009 ↗
20. Al-Mi’ani, N., Anbar, M., Sanjalawe, Y., and Karuppayah, S. (2021). International Conference on Advances in Cyber Security, Springer.
21. Elsayed, M.S., Jahromi, H.Z., Nazir, M.M., and Jurcut, A.D. (2021, January 6–7). The role of CNN for intrusion detection systems: An improved CNN learning approach for SDNs. Proceedings of the International Conference on Future Access Enablers of Ubiquitous and Intelligent Infrastructures, Virtual Event.10.1007/978-3-030-78459-1_7 ↗
22. Towards sFlow and adaptive polling sampling for deep learning based DDoS detection in SDN10.1016/j.future.2019.10.015 ↗
23. Hybrid optimization enabled deep learning technique for multi-level intrusion detection10.1016/j.advengsoft.2022.103197 ↗
24. AI applications to medical images: From machine learning to deep learning10.1016/j.ejmp.2021.02.006 ↗
25. Shamim, M.S.I., Bhuiyan, F.A., and Rahman, A. (2020, January 28–30). Xi commandments of kubernetes security: A systematization of knowledge related to kubernetes security practices. Proceedings of the 2020 IEEE Secure Development (SecDev), Atlanta, GA, USA.
26. A review of the advancement in intrusion detection datasets10.1016/j.procs.2020.03.330 ↗
27. UGR ‘16: A new dataset for the evaluation of cyclostationarity-based network IDSs10.1016/j.cose.2017.11.004 ↗
28. SDN-based architecture for transport and application layer DDoS attack detection by using machine and deep learning10.1109/ACCESS.2021.3101650 ↗
29. A novel deep learning model for detection of denial of service attacks in HTTP traffic over internet10.1504/IJAHUC.2020.106666 ↗
30. Towards effective detection of recent DDoS attacks: A deep learning approach
31. Elsayed, M.S., Le-Khac, N.A., Dev, S., and Jurcut, A.D. (September, January 31). Ddosnet: A deep-learning model for detecting network attacks. Proceedings of the 2020 IEEE 21st International Symposium on “A World of Wireless, Mobile and Multimedia Networks” (WoWMoM), Cork, Ireland.10.1109/WoWMoM49955.2020.00072 ↗
32. Towards effective network intrusion detection: From concept to creation on Azure cloud10.1109/ACCESS.2021.3054688 ↗
33. Near real-time security system applied to SDN environments in IoT networks using convolutional neural network10.1016/j.compeleceng.2020.106738 ↗
34. DDoS detection in 5G-enabled IoT networks using deep Kalman backpropagation neural network10.1007/s13042-021-01323-7 ↗