Abstract:Recently, SDN has arisen as a new network platform that offers unparalleled programming that enables network operators to dynamically customize and control their networks. The attackers aim to paralyse the logical plane, the brain of the network that offers several advantages, by using the SDN controller. However, the control plane is the desirable target of security attacks on the opponents because of its characteristics. One of the most common threats is the DDOS attacks to drain network capacity by sending them heavy traffic, causing network congestion. SDN is a common area of investigation for SDN defenceand DDoS threat identification and prevention in the SDN context has been introduced to many researchers since the proposed SDN attacks. Nevertheless, security risks must be adequately secured. In this paper we suggest a discrete scalable memory based support vector machine algorithm for DDoS threat and SDN mitigation architecture for attack detection. By starting the process of attack detection the input data can gets pre-processed by using Spark standardization technique in which the missing values are replaced and the unwanted data are removed. Then the feature extractions are done using semantic multilinear component analysis algorithm. The classifier is responsible for predicting target and for this a novel discrete scalable memory based support vector machine (DSM-SVM) algorithm is used which provides high accuracy of attack prediction. Followed by attack detection the mitigation process was done, here the mitigation server can identify the threat by intelligently dropping malicious bot traffic and absorbing the rest of the traffic. Here the suggested mechanism achieves attack traffic mitigation and benign traffic dropping. We have evaluated the whole process on KDD dataset. The proposed network model was trained and then used in an SDN threat detection and mitigation environment as part of the assessment process. The entire experiment is run on a VMware-based Ubuntu virtual machine. Weka will utilize our suggested classifier model for training and evaluation, while Mininet uses a RYU controller to establish an SD Network. The findings demonstrate that the mechanism presented exceeds the other algorithms examined, by expressing 99.7% accuracy especially concerning training and testing time over KDD dataset.

Toward a monitoring and threat detection system based on stream processing as a virtual network function for big data

Real-time Monitoring of Smart Grid Terminals Based on Multi-dimensional Information Fusion

An Efficient Sampling And Classification Approach For Flow Detection In Sdn-Based Big Data Centers

A distributed platform for intrusion detection system using data stream mining in a big data environment

Design and application of real-time network abnormal traffic detection system based on Spark Streaming

A Distributed Network Intrusion Detection System for Distributed Denial of Service Attacks in Vehicular Ad Hoc Network

SDN/NFV security framework for fog‐to‐things computing infrastructure

A Dynamic Ensemble Learning Framework for Data Stream Analysis and Real-Time Threat Detection

Big data analysis and distributed deep learning for next-generation intrusion detection system optimization

A Real Time Deep Learning based Approach for Detecting Network Attacks

Smart city infrastructure protection: real-time threat detection employing online reservoir computing architecture

Data Stream Processing for Packet-Level Analytics

Implementation and visualization of a netflow log data lake system for cyberattack detection using distributed deep learning

Towards Detecting Flooding DDOS Attacks Over Software Defined Networks Using Machine Learning Techniques

Towards a Near-real-time Protocol Tunneling Detector based on Machine Learning Techniques

Network Anomaly Detection in Cars: A Case for Time-Sensitive Stream Filtering and Policing

Parameterization and Performance Analysis of a Scalable, near Real-Time Packet Capturing Platform

Design and Development of A Cloud-Based IDS using Apache Kafka and Spark Streaming

StreaMon: a data-plane programming abstraction for Software-defined Stream Monitoring

A Machine Learning Based Detection and Mitigation of the DDOS Attack by Using SDN Controller Framework

Efficient Distributed Preprocessing Model for Machine Learning-Based Anomaly Detection over Large-Scale Cybersecurity Datasets