Abstract:Software Defined Networking (SDN) has become popular due to its flexibility and agility in network management, enabling rapid adaptation to changing business requirements, enhancing network performance, and reducing operational costs. However, the ubiquity of internet-based services has given rise to an alarming increase in cyber-attacks, posing serious threats to the security and stability of modern networks. Among these attacks, Distributed Denial of Service (DDoS) attacks have emerged as one of the most devastating, capable of disrupting critical services. Recent studies have shown that Deep Learning (DL) techniques with Software-defined networking have the potential to mitigate these threats effectively. However, existing solutions suffer from issues such as reliance on pre-defined rules and signatures, computational efficiency, low detection rates, and inefficient notification mechanisms, making them ineffective in detecting DDoS attacks. This paper proposes an efficient approach (BRS + CNN) using Balanced Random Sampling (BRS) and Convolutional Neural Networks (CNNs) to detect DDoS attacks in SDN environments. We have applied various mitigation techniques to mitigate these threats, such as filtering, rate limiting, and iptables rule for blocking spoofed IPs. In addition, we introduce a monitoring system that utilizes rate-limiting to oversee blocked IP addresses, ensuring that legitimate traffic is processed efficiently. The proposed model achieves high performance in binary and multi-classification, with an accuracy of over 99.99% for binary classification and 98.64% for multi-classification. Our proposed DDoS detection system not only detects the attack but also sends detailed contextual information to a designated email address. We compare our model with existing literature and demonstrate its superiority using Area Under The Curve (AUC) analysis. Moreover, we evaluated the efficiency and effectiveness of our proposed DDoS mitigation system by conducting a series of experiments across three distinct scenarios: Attack-Free, Attack-No Mitigation, and Attack-Mitigation. These results demonstrate the robustness of our proposed mitigation system in effectively combating DDoS attacks while also safeguarding the seamless continuity of regular network operations.

A Robust DDoS Intrusion Detection System Using Convolutional Neural Network

A novel CNN‐based approach for detection and classification of DDoS attacks

A Novel Self-Attention-Enabled Weighted Ensemble-Based Convolutional Neural Network Framework for Distributed Denial of Service Attack Classification

An Effective Deep Learning Based Multi-Class Classification of DoS and DDoS Attack Detection

Efficient Detection of DDoS Attacks Using a Hybrid Deep Learning Model with Improved Feature Selection

DDoSNet: A Deep-Learning Model for Detecting Network Attacks

Towards Effective Detection of Recent DDoS Attacks: A Deep Learning Approach

DDoSDet: An approach to Detect DDoS attacks using Neural Networks

Improvement of Distributed Denial of Service Attack Detection through Machine Learning and Data Processing

Advancing DDoS Attack Detection: A Synergistic Approach Using Deep Residual Neural Networks and Synthetic Oversampling

A Novel Supervised Deep Learning Solution to Detect Distributed Denial of Service (DDoS) attacks on Edge Systems using Convolutional Neural Networks (CNN)

An Intelligent Agent-Based Detection System for DDoS Attacks Using Automatic Feature Extraction and Selection

Distributed Denial of Service Attack Detection in Network Traffic Using Deep Learning Algorithm

Deep Learning-Based Approach for Detecting DDoS Attack on Software-Defined Networking Controller

Multilevel Deep Neural Network Approach for Enhanced Distributed Denial-of-Service Attack Detection and Classification in Software-Defined Internet of Things Networks.

Cyber-Secure SDN: A CNN-Based Approach for Efficient Detection and Mitigation of DDoS attacks

A novel optimization-driven deep learning framework for the detection of DDoS attacks

Cybernet Model: A New Deep Learning Model for Cyber DDoS Attacks Detection and Recognition

Attack Detection using DL based Feature Selection with Improved Convolutional Neural Network

Multi-Level Deep Neural Network for Distributed Denial-of-Service Attack Detection and Classification in Software-Defined Networking Supported Internet of Things Networks

DDoS‐MSCT: A DDoS Attack Detection Method Based on Multiscale Convolution and Transformer