Abstract:Software-defined Networking (SDN) has recently developed and been put forward as a promising and encouraging solution for future internet architecture. Managed, the centralized and controlled network has become more flexible and visible using SDN. On the other hand, these advantages bring us a more vulnerable environment and dangerous threats, causing network breakdowns, systems paralysis, online banking frauds and robberies. These issues have a significantly destructive impact on organizations, companies or even economies. Accuracy, high performance and real-time systems are essential to achieve this goal successfully. Extending intelligent machine learning algorithms in a network intrusion detection system (NIDS) through a software-defined network (SDN) has attracted considerable attention in the last decade. Big data availability, the diversity of data analysis techniques, and the massive improvement in the machine learning algorithms enable the building of an effective, reliable and dependable system for detecting different types of attacks that frequently target networks. This study demonstrates the use of machine learning algorithms for traffic monitoring to detect malicious behavior in the network as part of NIDS in the SDN controller. Different classical and advanced tree-based machine learning techniques, Decision Tree, Random Forest and XGBoost are chosen to demonstrate attack detection. The NSL-KDD dataset is used for training and testing the proposed methods; it is considered a benchmarking dataset for several state-of-the-art approaches in NIDS. Several advanced preprocessing techniques are performed on the dataset in order to extract the best form of the data, which produces outstanding results compared to other systems. Using just five out of 41 features of NSL-KDD, a multi-class classification task is conducted by detecting whether there is an attack and classifying the type of attack (DDoS, PROBE, R2L, and U2R), accomplishing an accuracy of 95.95%.

SSIDS: Semi-Supervised Intrusion Detection System by Extending the Logical Analysis of Data

Enabling semi-supervised learning in intrusion detection systems

usfAD Based Effective Unknown Attack Detection Focused IDS Framework

Online Self-Supervised Deep Learning for Intrusion Detection Systems

Su-Ids: A Semi-Supervised And Unsupervised Framework For Network Intrusion Detection

An intelligent intrusion detection system (IDS) for anomaly and misuse detection in computer networks

An Artificial Intelligence-based, Big Data-aware, Long-lasting Security Solution for the Internet of Things

Deep Learning Approach for IDS

An explainable nature-inspired cyber attack detection system in Software-Defined IoT applications

A Self-supervised Adversarial Learning Approach for Network Intrusion Detection System.

TLP-IDS: A Two-layer Intrusion Detection System for Integrated Electronic Systems

Learning to Detect: A Data-driven Approach for Network Intrusion Detection

Designing a Network Intrusion Detection System Based on Machine Learning for Software Defined Networks

A Lightweight and Intelligent Intrusion Detection System for Integrated Electronic Systems.

AOC-IDS: Autonomous Online Framework with Contrastive Learning for Intrusion Detection

A Novel Semi-supervised Anomaly Detection Method for Network Intrusion Detection

SF-IDS: An Imbalanced Semi-Supervised Learning Framework for Fine-grained Intrusion Detection

IDG-SemiAD: An Immune Detector Generation-Based Collaborative Learning Scheme for Semi-supervised Anomaly Detection in Industrial Cyber-physical Systems

An integrated rule based intrusion detection system: analysis on UNSW-NB15 data set and the real time online dataset

A Bidirectional LSTM Deep Learning Approach for Intrusion Detection