Abstract:The development of smart network infrastructure of the Internet of Things (IoT) faces the immense threat of sophisticated Distributed Denial-of-Services (DDoS) security attacks. The existing network security solutions of enterprise networks are significantly expensive and unscalable for IoT. The integration of recently developed Software Defined Networking (SDN) reduces a significant amount of computational overhead for IoT network devices and enables additional security measurements. At the prelude stage of SDN-enabled IoT network infrastructure, the sampling based security approach currently results in low accuracy and low DDoS attack detection. In this paper, we propose an Adaptive Machine Learning based SDN-enabled Distributed Denial-of-Services attacks Detection and Mitigation (AMLSDM) framework. The proposed AMLSDM framework develops an SDN-enabled security mechanism for IoT devices with the support of an adaptive machine learning classification model to achieve the successful detection and mitigation of DDoS attacks. The proposed framework utilizes machine learning algorithms in an adaptive multilayered feed-forwarding scheme to successfully detect the DDoS attacks by examining the static features of the inspected network traffic. In the proposed adaptive multilayered feed-forwarding framework, the first layer utilizes Support Vector Machine (SVM), Naive Bayes (NB), Random Forest (RF), k-Nearest Neighbor (kNN), and Logistic Regression (LR) classifiers to build a model for detecting DDoS attacks from the training and testing environment-specific datasets. The output of the first layer passes to an Ensemble Voting (EV) algorithm, which accumulates the performance of the first layer classifiers. In the third layer, the adaptive frameworks measures the real-time live network traffic to detect the DDoS attacks in the network traffic. The proposed framework utilizes a remote SDN controller to mitigate the detected DDoS attacks over Open Flow (OF) switches and reconfigures the network resources for legitimate network hosts. The experimental results show the better performance of the proposed framework as compared to existing state-of-the art solutions in terms of higher accuracy of DDoS detection and low false alarm rate.

Machine Learning Based Low-Rate DDoS Attack Detection for SDN Enabled IoT Networks

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Adaptive Machine Learning Based Distributed Denial-of-Services Attacks Detection and Mitigation System for SDN-Enabled IoT

Performance and Features: Mitigating the Low-Rate TCP-Targeted DoS Attack via SDN

DDoS Defense Scheme Based on Machine Learning in Software-Defined Networking.

Synchronizing Real-Time and High-Precision LDoS Defense of Learning Model-Based in AIoT with Programmable Data Plane, SDN

A DDoS Attack Detection Based on Deep Learning in Software-Defined Internet of Things

SDN-enabled Deep Learning Based Detection Mechanism (DDM) to Tackle DDoS Attacks in IoTs

Towards Detecting Flooding DDOS Attacks Over Software Defined Networks Using Machine Learning Techniques

Design and Implementation of IoT DDoS Attacks Detection System based on Machine Learning

Detection and Defense of DDoS Attack–based on Deep Learning in OpenFlow‐based SDN

Sdn-Specific Ddos/Lddos And The Machine Learning Based Detection

SDN-based detection and mitigation of DDoS attacks on smart homes

Research on DDoS Abnormal Traffic Detection Under SDN Network

DDoS Attack Detection under SDN Context

A DDoS Attack Detection Method Based on Information Entropy and Deep Learning in SDN

Secure SDN–IoT Framework for DDoS Attack Detection Using Deep Learning and Counter Based Approach

Multi-Level Deep Neural Network for Distributed Denial-of-Service Attack Detection and Classification in Software-Defined Networking Supported Internet of Things Networks

Low-rate distributed denial of service attacks detection in software defined network-enabled internet of things using machine learning combined with feature importance

A New Framework for DDoS Attack Detection and Defense in SDN Environment