Abstract:Network slicing is considered as a key enabler for 5G and beyond mobile networks for supporting a variety of new services, including enhanced mobile broadband, ultra-reliable and low-latency communication, and massive connectivity, on the same physical infrastructure. However, this technology increases the susceptibility of networks to cyber threats, particularly Distributed Denial-of-Service (DDoS) attacks. These attacks have the potential to cause service quality degradation by overloading network function(s) that are central to network slices to operate seamlessly. This calls for an Intrusion Detection System (IDS) as a shield against a wide array of DDoS attacks. In this regard, one promising solution would be the use of Deep Learning (DL) models for detecting possible DDoS attacks, an approach that has already made its way into the field given its manifest effectiveness. However, one particular challenge with DL models is that they require large volumes of labeled data for efficient training, which are not readily available in operational networks. A possible workaround is to resort to Transfer Learning (TL) approaches that can utilize the knowledge learned from prior training to a target domain with limited labeled data. This paper investigates how Deep Transfer Learning (DTL) based approaches can improve the detection of DDoS attacks in 5G networks by leveraging DL models, such as Bidirectional Long Short-Term Memory (BiLSTM), Convolutional Neural Network (CNN), Residual Network (ResNet), and Inception as base models. A comprehensive dataset generated in our 5G network slicing testbed serves as the source dataset for DTL, which includes both benign and different types of DDoS attack traffic. After learning features, patterns, and representations from the source dataset using initial training, we fine-tune base models using a variety of TL processes on a target DDoS attack dataset. The 5G-NIDD dataset, which has a sparse amount of annotated traffic pertaining to several DDoS attack generated in a real 5G network, is chosen as the target dataset. The results show that the proposed DTL models have performance improvements in detecting different types of DDoS attacks in 5G-NIDD dataset compared to the case when no TL is applied. According to the results, the BiLSTM and Inception models being identified as the top-performing models. BiLSTM indicates an improvement of 13.90%, 21.48%, and 12.22% in terms of accuracy, recall, and F1-score, respectively, whereas, Inception demonstrates an enhancement of 10.09% in terms of precision, compared to the models that do not adopt TL.

Jamming Attacks and Mitigation in Transfer Learning Enabled 5G RAN Slicing

Smart Jamming Attack and Mitigation on Deep Transfer Reinforcement Learning Enabled Resource Allocation for Network Slicing

Policy Poisoning Attacks on Transfer Learning Enabled Resource Allocation for Network Slicing

Reactive Jamming and Attack Mitigation over Cross-Technology Communication Links

Learning from Peers: Deep Transfer Reinforcement Learning for Joint Radio and Cache Resource Allocation in 5G RAN Slicing

Intelligent Anti-jamming based on Deep Reinforcement Learning and Transfer Learning

Enhancing O-RAN Security: Evasion Attacks and Robust Defenses for Graph Reinforcement Learning-based Connection Management

Multi-stage Jamming Attacks Detection using Deep Learning Combined with Kernelized Support Vector Machine in 5G Cloud Radio Access Networks

Toward Scalable and Efficient Hierarchical Deep Reinforcement Learning for 5G RAN Slicing

Robust Network Slicing: Multi-Agent Policies, Adversarial Attacks, and Defensive Strategies

Using Deep Reinforcement Learning for 5G RAN Slicing Resource Allocation in New Power Load Management System

Moving Target Defense based Secured Network Slicing System in the O-RAN Architecture

Federated Deep Reinforcement Learning for Efficient Jamming Attack Mitigation in O-RAN

5G NR Jamming, Spoofing, and Sniffing: Threat Assessment and Mitigation

Jamming Attacks on Decentralized Federated Learning in General Multi-Hop Wireless Networks

Defeating Proactive Jammers Using Deep Reinforcement Learning for Resource-Constrained IoT Networks

T-s3ra: traffic-aware scheduling for secure slicing and resource allocation in sdn/nfv enabled 5g networks

Smart Jamming Attacks in 5G New Radio: A Review

Transfer Reinforcement Learning for 5G-NR mm-Wave Networks

DTL-5G: Deep transfer learning-based DDoS attack detection in 5G and beyond networks

Security concerns on machine learning solutions for 6G networks in mmWave beam prediction