Abstract:This research article proposes a novel system called Two‐Phase Authentication for Attack Detection (TPAAD) that aims to enhance the security of software‐defined networking by mitigating denial‐of‐service attacks. The methodology utilized in our study involves the implementation of packet filtration and ML classification techniques, which are subsequently followed by the targeted restriction of malevolent network traffic. Software‐defined networking (SDN) has received considerable attention and adoption owing to its inherent advantages, such as enhanced scalability, increased adaptability, and the ability to exercise centralized control. However, the control plane of the system is vulnerable to denial‐of‐service (DoS) attacks, which are a primary focus for attackers. These attacks have the potential to result in substantial delays and packet loss. In this study, we present a novel system called Two‐Phase Authentication for Attack Detection that aims to enhance the security of SDN by mitigating DoS attacks. The methodology utilized in our study involves the implementation of packet filtration and machine learning classification techniques, which are subsequently followed by the targeted restriction of malevolent network traffic. Instead of completely deactivating the host, the emphasis lies on preventing harmful communication. Support vector machine and K‐nearest neighbours algorithms were utilized for efficient detection on the CICDoS 2017 dataset. The deployed model was utilized within an environment designed for the identification of threats in SDN. Based on the observations of the banned queue, our system allows a host to reconnect when it is no longer contributing to malicious traffic. The experiments were run on a VMware Ubuntu, and an SDN environment was created using Mininet and the RYU controller. The results of the tests demonstrated enhanced performance in various aspects, including the reduction of false positives, the minimization of central processing unit utilization and control channel bandwidth consumption, the improvement of packet delivery ratio, and the decrease in the number of flow requests submitted to the controller. These results confirm that our Two‐Phase Authentication for Attack Detection architecture identifies and mitigates SDN DoS attacks with low overhead.

Detecting Semantic Social Engineering Attack in the Context of Information Security

CETAD: Detecting evil twin access point attacks in wireless hotspots

Detecting Rogue Access Points Using Client-agnostic Wireless Fingerprints.

Accurate and Robust Rogue Access Point Detection with Client-Agnostic Wireless Fingerprinting

Cyber Attack Detection in Wireless Adhoc Network using Artificial Intelligence

Detection of man-in-the-middle attacks using physical layer wireless security techniques

A Robust Certificate Management System to Prevent Evil Twin Attacks in IEEE 802.11 Networks

Real-Time Identification of Rogue WiFi Connections in the Wild

Synthetical Malicious Behavior Detection of MAC Layer Multiple Attack in Wireless Sensor Networks

Rejecting the attack: Source authentication for Wi-Fi management frames using CSI Information

Anomaly Detection using Machine Learning Techniques in Wireless Sensor Networks

A Signature-Based Wireless Intrusion Detection System Framework for Multi-Channel Man-in-the-Middle Attacks Against Protected Wi-Fi Networks

Real-time Identification of Rogue WiFi Connections Using Environment-Independent Physical Features

Artificial Neural Network-Based Mechanism to Detect Security Threats in Wireless Sensor Networks

usfAD Based Effective Unknown Attack Detection Focused IDS Framework

Stealthy Deception Attacks Against SCADA Systems

D-ARP: An Efficient Scheme to Detect and Prevent ARP Spoofing

Hybrid Cyber-Security Model for Attacks Detection Based on Deep and Machine Learning

TPAAD: Two‐phase authentication system for denial of service attack detection and mitigation using machine learning in software‐defined network

A Machine Learning Based Framework for Real-Time Detection and Mitigation of Sensor False Data Injection Cyber-Physical Attacks in Industrial Control Systems

Analysis of the attack and its solution in wireless sensor networks