Abstract:Software-defined networking will be a critical component of the networking domain as it transitions from a standard networking design to an automation network. To meet the needs of the current scenario, this architecture redesign becomes mandatory. Besides, machine learning (ML) and deep learning (DL) techniques provide a significant solution in network attack detection, traffic classification, etc. The DDoS attack is still wreaking havoc. Previous work for DDoS attack detection in SDN has not yielded significant results, so the author has used the most recent deep learning technique to detect the attacks. In this paper, we aim to classify the network traffic into normal and malicious classes based on features in the available dataset by using various deep learning techniques. TCP, UDP, and ICMP traffic are considered normal; however, malicious traffic includes TCP Syn Attack, UDP Flood, and ICMP Flood, all of which are DDoS attack traffic. The major contribution of this paper is the identification of novel features for DDoS attack detection. Novel features are logged into the CSV file to create the dataset, and machine learning algorithms are trained on the created SDN dataset. Various work which has already been done for DDoS attack detection either used a non-SDN dataset or the research data is not made public. A novel hybrid machine learning model is utilized to perform the classification. The dataset used by the ML/DL algorithms is a collection of public datasets on DDoS attacks as well as an experimental DDoS dataset generated by us and publicly available on the Mendeley Data repository. A Python application performs the classification of traffic into one of the classes. From the various classifiers used, the accuracy score of 99.75% is achieved with Stacked Auto-Encoder Multi-layer Perceptron (SAE-MLP). To measure the effectiveness of the SDN-DDoS dataset, the other publicly available datasets are also evaluated against the same deep learning algorithms, and traffic classification accuracy is found to be significantly higher with the SDN-DDoS dataset. The attack detection time of 216.39 s also serve as experimental evidence.

Network Anomaly Early Warning through Generalized Network Temperature and Deep Learning

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

Abnormal Network Traffic Detection Algorithm Based on Improved Convolutional Neural Network

Network Anomaly Intrusion Detection Based on Deep Learning Approach

Campus Network Traffic Prediction and Anomaly Detection Based on Deep Learning

A Network Traffic anomaly Detection method based on CNN and XGBoost

DDoS Attack Detection Method Based on Network Abnormal Behavior in Big Data Environment

DDoS attack traffic classification in SDN using deep learning

A Deep Learning Model for Network Intrusion Detection with Imbalanced Data

An Effective Method for Computer Network Anomaly Detection

An efficient network behavior anomaly detection using a hybrid DBN-LSTM network

A DDoS Attack Detection Method Based on SVM in Software Defined Network

Abnormal Traffic Detection: Traffic Feature Extraction and DAE-GAN With Efficient Data Augmentation

A New Multistage Approach to Detect Subtle DDoS Attacks.

GSOOA-1DDRSN: Network traffic anomaly detection based on deep residual shrinkage networks

Time‐based DDoS attack detection through hybrid LSTM‐CNN model architectures: An investigation of many‐to‐one and many‐to‐many approaches

An Unsupervised Generative Adversarial Network System to Detect DDoS Attacks in SDN

Practical Cyber Attack Detection With Continuous Temporal Graph in Dynamic Network System

Attack detection analysis in software-defined networks using various machine learning method

Malicious Network Traffic Detection Based on Deep Neural Networks and Association Analysis

Design of Network Traffic Anomaly Detection Algorithm Based on Deep Convolutional Neural Network