Smart Multistage Privacy-Preserving Framework for Intrusion Detection in Multi-Domain SDN
Jayashree PadmanabhanSaranya PrabuSaikrishna BalakrishnanVinayaka Murthy VijayDepartment of Computer Technology,MIT Campus,Anna University,Chennai,Tamil Nadu 600044,IndiaJayashree Padmanabhan received her BE (Hons) in electronics and communication from Madurai Kamaraj University,Masters (electronics engineering),and PhD (computer science and engineering) from Anna University. She is currently working as a professor in the department of computer technology,Anna University,Chennai. She has rich teaching and research experience and nearly 50 reputed journal/conference publications. Her research interests include cyber security,cryptographic algorithms,data analytics,medical informatics and e-learning. Email: aranya Prabu received her BE and Mtech degrees in computer science and engineering from Anna University and Kalsalingam University in 2007 and 2009,respectively. Currently,she is pursuing her PhD in the department of computer technology at Anna University,MIT campus,Chennai. She is carrying out her research on security solutions for software-defined networks. Her research interests include deep learning,network security,and SDN. Corresponding author. Email: psaranya.cse@gmail.comSaikrishna Balakrishnan graduated from Anna University,MIT Campus with BE (Hons) in computer science and engineering in 2022. Currently,he is working as a software developer for Citicorp Services India Pvt. Ltd. in Chennai,India. His research interests include deep learning,network security,and blockchain applications. Email: krishna6122000@gmail.comVinayaka Murthy Vijay graduated from Anna University,MIT Campus with BE in computer science and engineering in 2022. Currently,he is working as a software developer for Verizon Data Services India (VDSI) in Chennai,India. His research interests include IOT,blockchain and networking applications. Email: vijayvinayak23@gmail.com
DOI: https://doi.org/10.1080/03772063.2023.2297380
IF: 1.8768
2024-01-05
IETE Journal of Research
Abstract:SDN architectures are frequently used by organizations for the management of their networks and the detection of anomalous traffic in a single domain. However, in the real world, anomalous traffic might result in attacks like distributed denial of service (DDoS) that affect numerous domains. During intrusion detection, each SDN domain has to send real traffic data of a large volume to the multi-domain controller, exposing its sensitive information. This paper proposes a smart multistage framework for detecting attacks and ensuring privacy at no additional cost. This work utilized the recent unbalanced InSDN dataset for experimentation. It also uses an oversampling technique that reduces the imbalance rate for each attack type and selects the smallest possible training size and feature set size for an increase in detection accuracy and a reduction in computational complexity. Then, a multi-class classifier method for intrusion detection that does not require regularization or hyperparameter tuning, called ensemble-learning-based shallow decision tree (ELSDT) is proposed. Furthermore, the performance of the proposed classifier on the InSDN dataset is assessed on an SDN testbed. Experimental results show the ability of the proposed smart multistage privacy-preserving framework to make a significant reduction in the training sample size and feature set size to 87% and 76%, respectively. It also shows its outperformance in recent literature works by 5.67% improved accuracy.
telecommunications,engineering, electrical & electronic