Abstract:This research article proposes a novel system called Two‐Phase Authentication for Attack Detection (TPAAD) that aims to enhance the security of software‐defined networking by mitigating denial‐of‐service attacks. The methodology utilized in our study involves the implementation of packet filtration and ML classification techniques, which are subsequently followed by the targeted restriction of malevolent network traffic. Software‐defined networking (SDN) has received considerable attention and adoption owing to its inherent advantages, such as enhanced scalability, increased adaptability, and the ability to exercise centralized control. However, the control plane of the system is vulnerable to denial‐of‐service (DoS) attacks, which are a primary focus for attackers. These attacks have the potential to result in substantial delays and packet loss. In this study, we present a novel system called Two‐Phase Authentication for Attack Detection that aims to enhance the security of SDN by mitigating DoS attacks. The methodology utilized in our study involves the implementation of packet filtration and machine learning classification techniques, which are subsequently followed by the targeted restriction of malevolent network traffic. Instead of completely deactivating the host, the emphasis lies on preventing harmful communication. Support vector machine and K‐nearest neighbours algorithms were utilized for efficient detection on the CICDoS 2017 dataset. The deployed model was utilized within an environment designed for the identification of threats in SDN. Based on the observations of the banned queue, our system allows a host to reconnect when it is no longer contributing to malicious traffic. The experiments were run on a VMware Ubuntu, and an SDN environment was created using Mininet and the RYU controller. The results of the tests demonstrated enhanced performance in various aspects, including the reduction of false positives, the minimization of central processing unit utilization and control channel bandwidth consumption, the improvement of packet delivery ratio, and the decrease in the number of flow requests submitted to the controller. These results confirm that our Two‐Phase Authentication for Attack Detection architecture identifies and mitigates SDN DoS attacks with low overhead.

A PBNM and economic incentive-based defensive mechanism against DDoS attacks

A reputation score policy and Bayesian game theory based incentivized mechanism for DDoS attacks mitigation and cyber defense

Modeling and Defending Advanced Metering Infrastructure Subjected to Distributed Denial-of-Service Attacks

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Effective DDoS Mitigation Via ML-Driven In-network Traffic Shaping

Defense mechanisms against DDoS attack based on entropy in SDN-cloud using POX controller

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

Proactive Defense Against Physical Denial of Service Attacks using Poisson Signaling Games

TPAAD: Two‐phase authentication system for denial of service attack detection and mitigation using machine learning in software‐defined network

Proactive Population-Risk Based Defense Against Denial of Cyber-Physical Service Attacks

DDoS Defense Mechanism Based on Software Defined Network

Enriched Model of Case Based Reasoning and Neutrosophic Intelligent System for DDoS Attack Defence in Software Defined Network based Cloud

DRDP: A DDoS-Resilient Data Pricing Mechanism

A Novel Topology Link-Controlling Approach for Active Defense of a Node in a Network

A pseudonymous credit driven mechanism to mitigate DDoS

An Adaptive Defending Mechanism Against Distributed Denial-of-Service (DDoS) Attacks

Dynamic and Auto Responsive Solution for Distributed Denial-of-Service Attacks Detection in ISP Network

Understanding the Behaviors of BGP-based DDoS Protection Services.

An MTD-driven Hybrid Defense Method Against DDoS Based on Markov Game in Multi-controller SDN-enabled IoT Networks

MiddlePolice

Fine-Grained Endpoint-Driven In-Network Traffic Control for Proactive DDoS Attack Mitigation