Abstract:Software-Defined Networking is a new network architecture that separates control and data planes. It has central network control and programmability facilities, so it improves manageability, scaling, and performance. However, it may suffer from creating a single point of failure against the controller, which represents the network control plane. So, defending the controller against attacks such as a distributed denial of service attack is a valuable and urgent issue. The advances of this paper are to implement an accurate and significant method to detect this attack with high accuracy using machine learning-based algorithms exploiting new advanced features obtained from traffic flow information and statistics. The developed model is trained with kernel radial basis function. The technique uses advanced features such as unknown destination addresses, packets inter-arrival time, transport layer protocol header, and type of service header. To the best knowledge of the authors, the proposed approach of the paper had not been used before. The proposed work begins with generating both normal and attack traffic flow packets through the network. When packets reach the controller, it extracts their headers and performs necessary flow calculations to get the needed features. The features are used to create a dataset that is used as an input to linear support vector machine classifier. The classifier is used to train the model with kernel radial basis function. Methods such as Naive Bayes, K-Nearest Neighbor, Decision Tree, and Random Forest are also utilized and compared with the SVM model to improve the detection operation. Hence, suspicious senders are blocked and their information is stored. The experimental results prove that the proposed technique detects the attack with high accuracy and low false alarm, compared to other related techniques.

Machine Learning with Service Classification for Detecting Control Plane Intrusions in Software Defined Optical Networks

A Machine Learning Based Intrusion Detection System for Software Defined 5 G Network

Machine Learning-Based IDS for Software-Defined 5G Network

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

A DDoS Detection Method Based on Feature Engineering and Machine Learning in Software-Defined Networks

Machine Learning-based Distributed Denial of Service Attacks Detection Technique using New Features in Software-defined Networks

Machine learning based malicious payload identification in software-defined networking

Attack detection analysis in software-defined networks using various machine learning method

Machine-Learning-Based Traffic Classification in Software-Defined Networks

Optical Spectrum Feature Analysis and Recognition for Optical Network Security with Machine Learning

DDoS attack detection in software defined networking controller using machine learning techniques

Intrusion detection systems for software-defined networks: a comprehensive study on machine learning-based techniques

Applying Transfer Learning Approaches for Intrusion Detection in Software-Defined Networking

Early Detection of Abnormal Attacks in Software-Defined Networking Using Machine Learning Approaches

Detection of distributed denial of service attacks using machine learning algorithms in software defined networks

A Deep Learning Approach to Detect Anomaly in Software-Defined Network

Research on DDoS Abnormal Traffic Detection Under SDN Network

Deep Learning-Based Approach for Detecting DDoS Attack on Software-Defined Networking Controller

A DDoS Attack Detection Method Based on SVM in Software Defined Network

Machine-learning-based optical spectrum feature analysis for DoS attack detection in IP over optical networks