Abstract:Software-defined Networking (SDN) has recently developed and been put forward as a promising and encouraging solution for future internet architecture. Managed, the centralized and controlled network has become more flexible and visible using SDN. On the other hand, these advantages bring us a more vulnerable environment and dangerous threats, causing network breakdowns, systems paralysis, online banking frauds and robberies. These issues have a significantly destructive impact on organizations, companies or even economies. Accuracy, high performance and real-time systems are essential to achieve this goal successfully. Extending intelligent machine learning algorithms in a network intrusion detection system (NIDS) through a software-defined network (SDN) has attracted considerable attention in the last decade. Big data availability, the diversity of data analysis techniques, and the massive improvement in the machine learning algorithms enable the building of an effective, reliable and dependable system for detecting different types of attacks that frequently target networks. This study demonstrates the use of machine learning algorithms for traffic monitoring to detect malicious behavior in the network as part of NIDS in the SDN controller. Different classical and advanced tree-based machine learning techniques, Decision Tree, Random Forest and XGBoost are chosen to demonstrate attack detection. The NSL-KDD dataset is used for training and testing the proposed methods; it is considered a benchmarking dataset for several state-of-the-art approaches in NIDS. Several advanced preprocessing techniques are performed on the dataset in order to extract the best form of the data, which produces outstanding results compared to other systems. Using just five out of 41 features of NSL-KDD, a multi-class classification task is conducted by detecting whether there is an attack and classifying the type of attack (DDoS, PROBE, R2L, and U2R), accomplishing an accuracy of 95.95%.

A machine learning procedure to detect network attacks

Detection of DDoS Attacks in Software Defined Networking Using Machine Learning Models

New attack strategies for complex networks

Improvement of Distributed Denial of Service Attack Detection through Machine Learning and Data Processing

Machine Learning Methods for Network Intrusion Detection

Using Graph Theory for Improving Machine Learning-based Detection of Cyber Attacks

A Real Time Deep Learning based Approach for Detecting Network Attacks

Attack detection analysis in software-defined networks using various machine learning method

An entropy and machine learning based approach for DDoS attacks detection in software defined networks

Detection of Distributed Denial of Service Attacks through a Combination of Machine Learning Algorithms over Software Defined Network Environment

Machine Learning for Detecting Anomalies and Intrusions in Communication Networks

A hybrid ensemble machine learning model for detecting APT attacks based on network behavior anomaly detection

DDoS attack detection in SDN: Enhancing entropy‐based detection with machine learning

Adversarial Attacks to Scale-Free Networks: Testing the Robustness of Physical Criteria

Detection of distributed denial of service attacks using machine learning algorithms in software defined networks

Machine Learning to detect cyber-attacks and discriminating the types of power system disturbances

An Experimental Analysis of Attack Classification Using Machine Learning in IoT Networks

Advancing Cyber-Attack Detection in Power Systems: A Comparative Study of Machine Learning and Graph Neural Network Approaches

Designing a Network Intrusion Detection System Based on Machine Learning for Software Defined Networks

Comparative Analysis of Intrusion Detection System Using Machine Learning and Deep Learning Algorithms

Predict And Prevent DDOS Attacks Using Machine Learning and Statistical Algorithms