Abstract:Software defined networking (SDN), network function virtualization (NFV), and cloud computing are receiving significant attention in 5G networks. However, this attention creates a new challenge for security provisioning in these integrated technologies. Research in the field of SDN, NFV, cloud computing, and 5G has recently focused on the intrusion detection and prevention system (IDPS). Existing IDPS solutions are inadequate, which could cause large resource wastage and several security threats. To alleviate security issues, timely detection of an attacker is important. Thus, in this paper, we propose a novel approach that is referred to as multilayered intrusion detection and prevention (ML-IDP) in an SDN/NFV-enabled cloud of 5G networks. The proposed approach defends against security attacks using artificial intelligence (AI). In this paper, we employed five layers: data acquisition layer, switches layer, domain controllers (DC) layer, smart controller (SC) layer, and virtualization layer (NFV infrastructure). User authentication is held in the first layer using the Four-Q-Curve algorithm. To address the flow table overloading attack in the switches layer, the game theory approach, which is executed in the IDP agent, is proposed. The involvement of the IDP agent is to completely avoid a flow table overloading attack by a deep reinforcement learning algorithm, and thus, it updates the current state of all switches. In the DC layer, packets are processed and classified into two classes (normal and suspicious) by a Shannon Entropy function. Normal packets are forwarded to the cloud via the SC. Suspicious packets are sent to the VNF using a growing multiple self-organization map (GM-SOM). The proposed ML-IDP system is evaluated using NS3.26 for different security attacks, including IP Spoofing, flow table overloading, DDoS, Control Plane Saturation, and host location hijacking. From the experiment results, we proved that the ML-IDP with AI-based defense mechanisms effectively detects and prevents attacks.

AI-Based Security Parallel Path Selection Mechanism

Parallel Path Selection Mechanism for Ddos Attack Detection

Combination Attacks and Defenses on SDN Topology Discovery.

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

A Path Selection Scheme for Detecting Malicious Behavior Based on Deep Reinforcement Learning in SDN/NFV-Enabled Network

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

Effective DDoS Mitigation Via ML-Driven In-network Traffic Shaping

Multi-layered Intrusion Detection and Prevention in the SDN/NFV Enabled Cloud of 5G Networks Using AI-based Defense Mechanisms.

A Multi-Layered Defence Strategy against DDoS Attacks in SDN/NFV-Based 5G Mobile Networks

Least-Unavailability Path Selecting Algorithm Based on RBF for Disaster-Survivable Software-Defined Optical Networks.

Traffic Feature Selection and Distributed Denial of Service Attack Detection in Software-Defined Networks Based on Machine Learning

Security SFC Path Selection Using Deep Reinforcement Learning.

QLSFC: An Intelligent Security Function Chain with Q-Learning in SDN/NFV Network.

QLSFC: an Intelligent Security Function Chain with Q-Learning in SDN/NFV Network

Special Issue on Artificial Intelligence-of-Things (aiot): Opportunities, Challenges, and Solutions-Part II: Artificial-Intelligence-Powered Internet of Things

SDN candidate and protection path selection for link failure protection in hybrid SDNs

A Dynamic Hidden Forwarding Path Planning Method Based on Improved Q-Learning in SDN Environments

Dynamic Security SFC Branching Path Selection Using Deep Reinforcement Learning

SD-Anti-DDoS: Fast and efficient DDoS defense in software-defined networks

Efficient Distributed Denial-of-Service Attack Defense in SDN-Based Cloud

SDNDefender: AComprehensiveDDoSDefenseMechanismUsing Hybrid Approaches over Software Defined Networking