Abstract:This research article proposes a novel system called Two‐Phase Authentication for Attack Detection (TPAAD) that aims to enhance the security of software‐defined networking by mitigating denial‐of‐service attacks. The methodology utilized in our study involves the implementation of packet filtration and ML classification techniques, which are subsequently followed by the targeted restriction of malevolent network traffic. Software‐defined networking (SDN) has received considerable attention and adoption owing to its inherent advantages, such as enhanced scalability, increased adaptability, and the ability to exercise centralized control. However, the control plane of the system is vulnerable to denial‐of‐service (DoS) attacks, which are a primary focus for attackers. These attacks have the potential to result in substantial delays and packet loss. In this study, we present a novel system called Two‐Phase Authentication for Attack Detection that aims to enhance the security of SDN by mitigating DoS attacks. The methodology utilized in our study involves the implementation of packet filtration and machine learning classification techniques, which are subsequently followed by the targeted restriction of malevolent network traffic. Instead of completely deactivating the host, the emphasis lies on preventing harmful communication. Support vector machine and K‐nearest neighbours algorithms were utilized for efficient detection on the CICDoS 2017 dataset. The deployed model was utilized within an environment designed for the identification of threats in SDN. Based on the observations of the banned queue, our system allows a host to reconnect when it is no longer contributing to malicious traffic. The experiments were run on a VMware Ubuntu, and an SDN environment was created using Mininet and the RYU controller. The results of the tests demonstrated enhanced performance in various aspects, including the reduction of false positives, the minimization of central processing unit utilization and control channel bandwidth consumption, the improvement of packet delivery ratio, and the decrease in the number of flow requests submitted to the controller. These results confirm that our Two‐Phase Authentication for Attack Detection architecture identifies and mitigates SDN DoS attacks with low overhead.

Improving Network Security by using Software Defined Networking (SDN)

THP: A Novel Authentication Scheme to Prevent Multiple Attacks in SDN-Based IoT Network.

Improving Internet of Things (IoT) Security with Software-Defined Networking (SDN)

Enhancing Network Security through Software Defined Networking (SDN)

Security analysis and provision of authentication protocol, based on peer-to-peer structure in IOT platform

A secure addressing mutual authentication scheme for smart IoT home network

Security Framework for Internet-of-Things-Based Software-Defined Networks Using Blockchain

TPAAD: Two‐phase authentication system for denial of service attack detection and mitigation using machine learning in software‐defined network

Security Analysis and Improvements of Authentication and Access Control in the Internet of Things

Authentication Based Remote System for the Interaction of Reservation Scheme of Cloud with IoT Networks

An Efficient Unique Tokenized Authentication Technique Based Data Offloading Approach Using Key Exchange to Maintain Data Integrity in Heterogeneous Networks

Anonymous authentication key agreement scheme with pairing-based cryptography for home-based multi-sensor Internet of Things

ALAM: Anonymous Lightweight Authentication Mechanism for SDN-Enabled Smart Homes

A review: a new authentication protocol for real-time healthcare monitoring system

The Meeting of Acquaintances: A Cost-efficient Authentication Scheme for Light-weight Objects with Transient Trust Level and Plurality Approach

An hybrid security framework using internet of things for healthcare system

PkT-SIN: A Secure Communication Protocol for Space Information Networks With Periodic k-Time Anonymous Authentication

Defending Against Identity Threats Using Risk-Based Authentication

Efficient Cyber Security Framework for IoT Using Machine Learning Algorithms

A lightweight group-based SDN-driven encryption protocol for smart home IoT devices

An anonymous mutual authentication and key agreement scheme in WMSN using physiological data