Abstract:The development of smart network infrastructure of the Internet of Things (IoT) faces the immense threat of sophisticated Distributed Denial-of-Services (DDoS) security attacks. The existing network security solutions of enterprise networks are significantly expensive and unscalable for IoT. The integration of recently developed Software Defined Networking (SDN) reduces a significant amount of computational overhead for IoT network devices and enables additional security measurements. At the prelude stage of SDN-enabled IoT network infrastructure, the sampling based security approach currently results in low accuracy and low DDoS attack detection. In this paper, we propose an Adaptive Machine Learning based SDN-enabled Distributed Denial-of-Services attacks Detection and Mitigation (AMLSDM) framework. The proposed AMLSDM framework develops an SDN-enabled security mechanism for IoT devices with the support of an adaptive machine learning classification model to achieve the successful detection and mitigation of DDoS attacks. The proposed framework utilizes machine learning algorithms in an adaptive multilayered feed-forwarding scheme to successfully detect the DDoS attacks by examining the static features of the inspected network traffic. In the proposed adaptive multilayered feed-forwarding framework, the first layer utilizes Support Vector Machine (SVM), Naive Bayes (NB), Random Forest (RF), k-Nearest Neighbor (kNN), and Logistic Regression (LR) classifiers to build a model for detecting DDoS attacks from the training and testing environment-specific datasets. The output of the first layer passes to an Ensemble Voting (EV) algorithm, which accumulates the performance of the first layer classifiers. In the third layer, the adaptive frameworks measures the real-time live network traffic to detect the DDoS attacks in the network traffic. The proposed framework utilizes a remote SDN controller to mitigate the detected DDoS attacks over Open Flow (OF) switches and reconfigures the network resources for legitimate network hosts. The experimental results show the better performance of the proposed framework as compared to existing state-of-the art solutions in terms of higher accuracy of DDoS detection and low false alarm rate.

Synchronizing Real-Time and High-Precision LDoS Defense of Learning Model-Based in AIoT with Programmable Data Plane, SDN

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

Synchronizing DDoS detection and mitigation based graph learning with programmable data plane, SDN

Collaborative DDoS Defense for SDN-based AIoT with Autoencoder-Enhanced Federated Learning

Machine Learning Based Low-Rate DDoS Attack Detection for SDN Enabled IoT Networks

Performance and Features: Mitigating the Low-Rate TCP-Targeted DoS Attack via SDN

An Efficient Scheme to Defend Data-to-Control-Plane Saturation Attacks in Software-Defined Networking

A DDoS Attack Detection Based on Deep Learning in Software-Defined Internet of Things

Adaptive Machine Learning Based Distributed Denial-of-Services Attacks Detection and Mitigation System for SDN-Enabled IoT

CCS: A Cross-Plane Collaboration Strategy to Defend Against LDoS Attacks in SDN

SDN-enabled Deep Learning Based Detection Mechanism (DDM) to Tackle DDoS Attacks in IoTs

SDN-Defend: A Lightweight Online Attack Detection and Mitigation System for DDoS Attacks in SDN

An SDN-Enabled Proactive Defense Framework for DDoS Mitigation in IoT Networks

DDoS Defense Scheme Based on Machine Learning in Software-Defined Networking.

Software-defined DDoS Detection with Information Entropy Analysis and Optimized Deep Learning.

ADMS: An online attack detection and mitigation system for LDoS attacks via SDN

Deep Reinforcement Learning based Smart Mitigation of DDoS Flooding in Software-Defined Networks

Multi-SDN Based Cooperation Scheme for DDoS Attack Defense

EXCLF: A LDoS Attack Detection & Mitigation Model Based on Programmable Data Plane☆ ☆

A Cross-Plane Cooperative DDoS Detection and Defense Mechanism in Software-Defined Networking.

Efficient DDoS Attacks Mitigation for Stateful Forwarding in Internet of Things