Abstract:Due to the large computational overhead, underutilization of features, and high bandwidth consumption in traditional SDN environments for DDoS attack detection and mitigation methods, this paper proposes a two-stage detection and mitigation method for DDoS attacks in SDN based on multi-dimensional characteristics. Firstly, an analysis of the traffic statistics from the SDN switch ports is performed, which aids in conducting a coarse-grained detection of DDoS attacks within the network. Subsequently, a Multi-Dimensional Deep Convolutional Classifier (MDDCC) is constructed using wavelet decomposition and convolutional neural networks to extract multi-dimensional characteristics from the traffic data passing through suspicious switches. Based on these extracted multi-dimensional characteristics, a simple classifier can be employed to accurately detect attack samples. Finally, by integrating graph theory with restrictive strategies, the source of attacks in SDN networks can be effectively traced and isolated. The experimental results indicate that the proposed method, which utilizes a minimal amount of statistical information, can quickly and accurately detect attacks within the SDN network. It demonstrates superior accuracy and generalization capabilities compared to traditional detection methods, especially when tested on both simulated and public datasets. Furthermore, by isolating the affected nodes, the method effectively mitigates the impact of the attacks, ensuring the normal transmission of legitimate traffic during network attacks. This approach not only enhances the detection capabilities but also provides a robust mechanism for containing the spread of cyber threats, thereby safeguarding the integrity and performance of the network.

Multi-class DRDoS Attack Detection Method Based on Feature Selection

Low-rate DoS Attack Detection Method Based on Hybrid Deep Neural Networks.

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

Defensive mechanism against DDoS attack based on feature selection and multi-classifier algorithms

Combining cross-correlation and fuzzy classification to detect distributed denial-of-service attacks

A feature selection-based method for DDoS attack flow classification

A generalized machine learning model for DDoS attacks detection using hybrid feature selection and hyperparameter tuning

A DDoS Detection Method Based on Feature Engineering and Machine Learning in Software-Defined Networks

Detecting DDoS Attacks in Software-Defined Networks Through Feature Selection Methods and Machine Learning Models

Predict And Prevent DDOS Attacks Using Machine Learning and Statistical Algorithms

A New Multistage Approach to Detect Subtle DDoS Attacks.

A feature reduction based reflected and exploited DDoS attacks detection system

Feature Selection to Enhance DDoS Detection Using Hybrid N-Gram Heuristic Techniques

Exploring Feature Importance and Explainability Towards Enhanced ML-Based DoS Detection in AI Systems

Reflective Distributed Denial of Service Detection: A Novel Model Utilizing Binary Particle Swarm Optimization—Simulated Annealing for Feature Selection and Gray Wolf Optimization-Optimized LightGBM Algorithm

TCP/UDP-Based Exploitation DDoS Attacks Detection Using AI Classification Algorithms with Common Uncorrelated Feature Subset Selected by Pearson, Spearman and Kendall Correlation Methods

Efficient Detection of DDoS Attacks Using a Hybrid Deep Learning Model with Improved Feature Selection

Detection of Distributed Denial of Service Attacks Using Automatic Feature Selection with Enhancement for Imbalance Dataset

Detection and mitigation of DDoS attacks based on multi-dimensional characteristics in SDN

A novel CNN‐based approach for detection and classification of DDoS attacks

DDoS attack detection with feature engineering and machine learning: the framework and performance evaluation