Abstract:Recently, SDN has arisen as a new network platform that offers unparalleled programming that enables network operators to dynamically customize and control their networks. The attackers aim to paralyse the logical plane, the brain of the network that offers several advantages, by using the SDN controller. However, the control plane is the desirable target of security attacks on the opponents because of its characteristics. One of the most common threats is the DDOS attacks to drain network capacity by sending them heavy traffic, causing network congestion. SDN is a common area of investigation for SDN defenceand DDoS threat identification and prevention in the SDN context has been introduced to many researchers since the proposed SDN attacks. Nevertheless, security risks must be adequately secured. In this paper we suggest a discrete scalable memory based support vector machine algorithm for DDoS threat and SDN mitigation architecture for attack detection. By starting the process of attack detection the input data can gets pre-processed by using Spark standardization technique in which the missing values are replaced and the unwanted data are removed. Then the feature extractions are done using semantic multilinear component analysis algorithm. The classifier is responsible for predicting target and for this a novel discrete scalable memory based support vector machine (DSM-SVM) algorithm is used which provides high accuracy of attack prediction. Followed by attack detection the mitigation process was done, here the mitigation server can identify the threat by intelligently dropping malicious bot traffic and absorbing the rest of the traffic. Here the suggested mechanism achieves attack traffic mitigation and benign traffic dropping. We have evaluated the whole process on KDD dataset. The proposed network model was trained and then used in an SDN threat detection and mitigation environment as part of the assessment process. The entire experiment is run on a VMware-based Ubuntu virtual machine. Weka will utilize our suggested classifier model for training and evaluation, while Mininet uses a RYU controller to establish an SD Network. The findings demonstrate that the mechanism presented exceeds the other algorithms examined, by expressing 99.7% accuracy especially concerning training and testing time over KDD dataset.

Machine-Learning-Enabled DDoS Attacks Detection in P4 Programmable Networks

Machine-learning-assisted DDoS attack detection with P4 language

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

P4-HLDMC: A Novel Framework for DDoS and ARP Attack Detection and Mitigation in SD-IoT Networks Using Machine Learning, Stateful P4, and Distributed Multi-Controller Architecture

Anti-DDoS Attacks Strategy of SDN Data Plane with Data Augmentation Based on P4

Effective DDoS Mitigation Via ML-Driven In-network Traffic Shaping

Detection of DDoS Attacks in Software Defined Networking Using Machine Learning Models

Detection of Distributed Denial of Service Attacks through a Combination of Machine Learning Algorithms over Software Defined Network Environment

P4httpGuard: detection and prevention of slow-rate DDoS attacks using machine learning techniques in P4 switch

Towards Detecting Flooding DDOS Attacks Over Software Defined Networks Using Machine Learning Techniques

Two-Layers DDoS Attack Detection Model Using Machine Learning in Software Defined Networking

Sdn-Specific Ddos/Lddos And The Machine Learning Based Detection

DDoS attack detection in software defined networking controller using machine learning techniques

DDoS Defense Scheme Based on Machine Learning in Software-Defined Networking.

Adaptive Machine Learning Based Distributed Denial-of-Services Attacks Detection and Mitigation System for SDN-Enabled IoT

A Machine Learning Based Detection and Mitigation of the DDOS Attack by Using SDN Controller Framework

Detecting and mitigating DDoS attacks with moving target defense approach based on automated flow classification in SDN networks

Cross-layer detection and defence mechanism against DDoS and DRDoS attacks in software-defined networks using P4 switches

Machine Learning Based Low-Rate DDoS Attack Detection for SDN Enabled IoT Networks

FADM: DDoS Flooding Attack Detection and Mitigation System in Software-Defined Networking