Abstract:This research article proposes a novel system called Two‐Phase Authentication for Attack Detection (TPAAD) that aims to enhance the security of software‐defined networking by mitigating denial‐of‐service attacks. The methodology utilized in our study involves the implementation of packet filtration and ML classification techniques, which are subsequently followed by the targeted restriction of malevolent network traffic. Software‐defined networking (SDN) has received considerable attention and adoption owing to its inherent advantages, such as enhanced scalability, increased adaptability, and the ability to exercise centralized control. However, the control plane of the system is vulnerable to denial‐of‐service (DoS) attacks, which are a primary focus for attackers. These attacks have the potential to result in substantial delays and packet loss. In this study, we present a novel system called Two‐Phase Authentication for Attack Detection that aims to enhance the security of SDN by mitigating DoS attacks. The methodology utilized in our study involves the implementation of packet filtration and machine learning classification techniques, which are subsequently followed by the targeted restriction of malevolent network traffic. Instead of completely deactivating the host, the emphasis lies on preventing harmful communication. Support vector machine and K‐nearest neighbours algorithms were utilized for efficient detection on the CICDoS 2017 dataset. The deployed model was utilized within an environment designed for the identification of threats in SDN. Based on the observations of the banned queue, our system allows a host to reconnect when it is no longer contributing to malicious traffic. The experiments were run on a VMware Ubuntu, and an SDN environment was created using Mininet and the RYU controller. The results of the tests demonstrated enhanced performance in various aspects, including the reduction of false positives, the minimization of central processing unit utilization and control channel bandwidth consumption, the improvement of packet delivery ratio, and the decrease in the number of flow requests submitted to the controller. These results confirm that our Two‐Phase Authentication for Attack Detection architecture identifies and mitigates SDN DoS attacks with low overhead.

THP: A Novel Authentication Scheme to Prevent Multiple Attacks in SDN-Based IoT Network.

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Lightweight Authentication Protocol Based on Physical Unclonable Function

Improving Network Security by using Software Defined Networking (SDN)

Deeper Insight Into Why Authentication Schemes in IoT Environments Fail to Achieve the Desired Security

A Secure IoT-Based Authentication System in Cloud Computing Environment

User security authentication protocol in multi gateway scenarios of the Internet of Things

On Designing a Lesser Obtrusive Authentication Protocol to Prevent Machine-Learning-Based Threats in Internet of Things

A secure addressing mutual authentication scheme for smart IoT home network

Secure and anonymous authentication scheme for the Internet of Things with pairing

A lightweight group-based SDN-driven encryption protocol for smart home IoT devices

Novel Mitm Attacks On Security Protocols In Sdn: A Feasibility Study

An Efficient (t, N) Threshold Authentication Scheme for Vehicular Ad Hoc Networks

Anonymous authentication key agreement scheme with pairing-based cryptography for home-based multi-sensor Internet of Things

Design of a Secure Dynamic Identity Authentication Scheme for Health Internet of Things

TPAAD: Two‐phase authentication system for denial of service attack detection and mitigation using machine learning in software‐defined network

Security analysis and provision of authentication protocol, based on peer-to-peer structure in IOT platform

A Fast and Scalable Authentication Scheme in IoT for Smart Living

A dual-factor access authentication scheme for IoT terminal in 5G environments with network slice selection

Two-factor authentication in industrial Internet-of-Things: Attacks, evaluation and new construction