Abstract:This research article proposes a novel system called Two‐Phase Authentication for Attack Detection (TPAAD) that aims to enhance the security of software‐defined networking by mitigating denial‐of‐service attacks. The methodology utilized in our study involves the implementation of packet filtration and ML classification techniques, which are subsequently followed by the targeted restriction of malevolent network traffic. Software‐defined networking (SDN) has received considerable attention and adoption owing to its inherent advantages, such as enhanced scalability, increased adaptability, and the ability to exercise centralized control. However, the control plane of the system is vulnerable to denial‐of‐service (DoS) attacks, which are a primary focus for attackers. These attacks have the potential to result in substantial delays and packet loss. In this study, we present a novel system called Two‐Phase Authentication for Attack Detection that aims to enhance the security of SDN by mitigating DoS attacks. The methodology utilized in our study involves the implementation of packet filtration and machine learning classification techniques, which are subsequently followed by the targeted restriction of malevolent network traffic. Instead of completely deactivating the host, the emphasis lies on preventing harmful communication. Support vector machine and K‐nearest neighbours algorithms were utilized for efficient detection on the CICDoS 2017 dataset. The deployed model was utilized within an environment designed for the identification of threats in SDN. Based on the observations of the banned queue, our system allows a host to reconnect when it is no longer contributing to malicious traffic. The experiments were run on a VMware Ubuntu, and an SDN environment was created using Mininet and the RYU controller. The results of the tests demonstrated enhanced performance in various aspects, including the reduction of false positives, the minimization of central processing unit utilization and control channel bandwidth consumption, the improvement of packet delivery ratio, and the decrease in the number of flow requests submitted to the controller. These results confirm that our Two‐Phase Authentication for Attack Detection architecture identifies and mitigates SDN DoS attacks with low overhead.

Automatic Vulnerability Checking of IEEE 802.16 WiMAX Protocols through TLA+

Vulnerabilities and Attacks of Inter-device Coordination in Programmable Networks.

Channel Surfing and Spatial Retreats

Defending Wireless Networks from Radio Interference Attacks

Exception triggered DoS attacks on wireless networks

Detection and Response of Low-Rate TCP-targeted Denial of Service Attacks

Port Scanning Techniques and Analysis of Attack and Defense

Stochastic Stability Analysis of Networked Control Systems with Random Cryptographic Protection under Random Zero-Measurement Attacks

The Feasibility of Launching and Detecting Jamming Attacks in Wireless Networks.

LQG Control under Denial-of-Service Attacks: an Experimental Study

SecureMAC: Securing Wireless Medium Access Control Against Insider Denial-of-Service Attacks

Weakness analysis and attack test for WLAN

Exploiting Cross-Layer Vulnerabilities: Off-Path Attacks on the TCP/IP Protocol Suite

Efficient and enhanced broadcast authentication protocols based on multilevel μTESLA

Off-Path TCP Hijacking in Wi-Fi Networks: A Packet-Size Side Channel Attack

Novel Mitm Attacks On Security Protocols In Sdn: A Feasibility Study

Man-in-the-Middle Attacks Without Rogue AP: when WPAs Meet ICMP Redirects.

The Denial of Service Attack Analysis of WLAN Authentication Infrastructure

Design and Analysis of an Attack Resilient and Adaptive Medium access Control Protocol for Computer Networks

Research on Security Vulnerability of 802.16 Standard in Mesh Mode

TPAAD: Two‐phase authentication system for denial of service attack detection and mitigation using machine learning in software‐defined network