Abstract:Due to the large computational overhead, underutilization of features, and high bandwidth consumption in traditional SDN environments for DDoS attack detection and mitigation methods, this paper proposes a two-stage detection and mitigation method for DDoS attacks in SDN based on multi-dimensional characteristics. Firstly, an analysis of the traffic statistics from the SDN switch ports is performed, which aids in conducting a coarse-grained detection of DDoS attacks within the network. Subsequently, a Multi-Dimensional Deep Convolutional Classifier (MDDCC) is constructed using wavelet decomposition and convolutional neural networks to extract multi-dimensional characteristics from the traffic data passing through suspicious switches. Based on these extracted multi-dimensional characteristics, a simple classifier can be employed to accurately detect attack samples. Finally, by integrating graph theory with restrictive strategies, the source of attacks in SDN networks can be effectively traced and isolated. The experimental results indicate that the proposed method, which utilizes a minimal amount of statistical information, can quickly and accurately detect attacks within the SDN network. It demonstrates superior accuracy and generalization capabilities compared to traditional detection methods, especially when tested on both simulated and public datasets. Furthermore, by isolating the affected nodes, the method effectively mitigates the impact of the attacks, ensuring the normal transmission of legitimate traffic during network attacks. This approach not only enhances the detection capabilities but also provides a robust mechanism for containing the spread of cyber threats, thereby safeguarding the integrity and performance of the network.

Detection and Defense of DDoS Attack–based on Deep Learning in OpenFlow‐based SDN

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

A Deep Learning Based DDoS Detection System in Software-Defined Networking (SDN)

DDoS Defense Scheme Based on Machine Learning in Software-Defined Networking.

Overview of DDoS Attack Detection in Software-Defined Networks

Combating DDoS Attack with Dynamic Detection of Anomalous Hosts in Software Defined Network

Two-Layers DDoS Attack Detection Model Using Machine Learning in Software Defined Networking

SDN-Defend: A Lightweight Online Attack Detection and Mitigation System for DDoS Attacks in SDN

DDoSNet: A Deep-Learning Model for Detecting Network Attacks

Distributed Denial of Service Defense in Software Defined Network Using OpenFlow.

A DDoS Attack Detection Method Based on Information Entropy and Deep Learning in SDN

Detection and mitigation of DDoS attacks based on multi-dimensional characteristics in SDN

A New Framework for DDoS Attack Detection and Defense in SDN Environment

A DDoS Attack Detection Method Based on SVM in Software Defined Network

DDoS attack detection in software defined networking controller using machine learning techniques

Deep Reinforcement Learning based Smart Mitigation of DDoS Flooding in Software-Defined Networks

Machine Learning Based Low-Rate DDoS Attack Detection for SDN Enabled IoT Networks

SD-Anti-DDoS: Fast and efficient DDoS defense in software-defined networks

Software-defined DDoS Detection with Information Entropy Analysis and Optimized Deep Learning.

Sdn-Specific Ddos/Lddos And The Machine Learning Based Detection