Abstract:Software-defined Networking (SDN) has recently developed and been put forward as a promising and encouraging solution for future internet architecture. Managed, the centralized and controlled network has become more flexible and visible using SDN. On the other hand, these advantages bring us a more vulnerable environment and dangerous threats, causing network breakdowns, systems paralysis, online banking frauds and robberies. These issues have a significantly destructive impact on organizations, companies or even economies. Accuracy, high performance and real-time systems are essential to achieve this goal successfully. Extending intelligent machine learning algorithms in a network intrusion detection system (NIDS) through a software-defined network (SDN) has attracted considerable attention in the last decade. Big data availability, the diversity of data analysis techniques, and the massive improvement in the machine learning algorithms enable the building of an effective, reliable and dependable system for detecting different types of attacks that frequently target networks. This study demonstrates the use of machine learning algorithms for traffic monitoring to detect malicious behavior in the network as part of NIDS in the SDN controller. Different classical and advanced tree-based machine learning techniques, Decision Tree, Random Forest and XGBoost are chosen to demonstrate attack detection. The NSL-KDD dataset is used for training and testing the proposed methods; it is considered a benchmarking dataset for several state-of-the-art approaches in NIDS. Several advanced preprocessing techniques are performed on the dataset in order to extract the best form of the data, which produces outstanding results compared to other systems. Using just five out of 41 features of NSL-KDD, a multi-class classification task is conducted by detecting whether there is an attack and classifying the type of attack (DDoS, PROBE, R2L, and U2R), accomplishing an accuracy of 95.95%.

Multilayer Machine Learning-Based Intrusion Detection System

NIDS: Neural Network Based Intrusion Detection System

Multi-agent based hybrid Intrusion detection system

A Network Intrusion Detection System Using Hybrid Multilayer Deep Learning Model

Network intrusion detection system: machine learning approach

Intrusion Detection System Based on Pattern Recognition

Cyber Intrusion Detection Using Machine Learning Classification Techniques

Three layer hybrid learning to improve intrusion detection system performance

Designing a Network Intrusion Detection System Based on Machine Learning for Software Defined Networks

i-2NIDS Novel Intelligent Intrusion Detection Approach for a Strong Network Security

An empirical evaluation for the intrusion detection features based on machine learning and feature selection methods

Network intrusion detection system: A systematic study of machine learning and deep learning approaches

Machine Learning Methods for Network Intrusion Detection

Implement an Intrusion Detection System Utilizing Machine Learning and Principal Component Analysis

Multilayer Intrusion Detection System Based on Semi-supervised Clustering

Multi-layer Intrusion Detection and Defence Mechanisms Based on Immunity

A Deep Learning-Based Framework for Feature Extraction and Classification of Intrusion Detection in Networks

Network intrusion detection system using deep neural networks

Improving the Performance of Machine Learning-Based Network Intrusion Detection Systems on the UNSW-NB15 Dataset

2-layer classification model with correlated common feature selection for intrusion detection system in networks

Classification model for accuracy and intrusion detection using machine learning approach