Abstract:Software Defined Networking (SDN) is an emerging network platform, which facilitates centralised network management. The SDN enables the network operators to manage the overall network consistently and holistically, regardless the complexity of infrastructure devices. The promising features of the SDN enhance network security and facilitate the implementation of threat detection systems through software applications using open APIs. However, the emerging technology creates new security concerns and new threats that do not exist in the current traditional networks. Distributed Denial of Service attacks (DDoS) are one of the most rampant attacks that can interrupt the functionality of the network and make most of the network services unreachable for network users. The efficient identification of DDos attacks on SDN environments in literature is still a challenge because of the number of network features taken into account and the overhead of applying machine learning based anomaly detection techniques. Hence, in this paper, we aim to use two popular feature selection methods, i.e., Information Gain (IG) and Random Forest (RF) in order to analyse the most comprehensive relevant features of DDoS attacks in SDN networks. Using the most relevant features will improve the accuracy of the anomaly detection system and reduce the false alarm rates. Moreover, we propose a Deep Learning (DL) technique based on Long Short Term Memory (LSTM) and Autoencoder to tackle the problem of DDoS attacks in SDNs. We perform our analysis and evaluation on three different datasets, i.e., InSDN, CICIDS2017 and CICIDS2018. We also measure the overhead of the proposed DL model on the SDN controller and test the network performance in terms of network throughput and end-to-end latency. The results validate that the DL approach can efficiently identify DDoS attacks in SDN environments without any significant degradation in the controller performance.

A DDoS Detection Method Based on Feature Engineering and Machine Learning in Software-Defined Networks

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Detecting DDoS Attacks in Software-Defined Networks Through Feature Selection Methods and Machine Learning Models

Detection of DDoS Attacks in Software Defined Networking Using Machine Learning Models

Attack detection analysis in software-defined networks using various machine learning method

DDoS Defense Scheme Based on Machine Learning in Software-Defined Networking.

Traffic Feature Selection and Distributed Denial of Service Attack Detection in Software-Defined Networks Based on Machine Learning

Detection and Defense Against DDoS Attack on SDN Controller Based on Feature Selection

A DDoS Attack Detection Method Based on SVM in Software Defined Network

Software-defined DDoS Detection with Information Entropy Analysis and Optimized Deep Learning.

Deep Learning-Based Approach for Detecting DDoS Attack on Software-Defined Networking Controller

A DDoS Attack Detection Method Based on Information Entropy and Deep Learning in SDN

A Flow-Based Anomaly Detection Approach with Feature Selection Method Against DDoS Attacks in SDNs

A hybrid method of entropy and SSAE-SVM based DDoS detection and mitigation mechanism in SDN

DDoS attack detection with feature engineering and machine learning: the framework and performance evaluation

Detection and mitigation of DDoS attacks based on multi-dimensional characteristics in SDN

An entropy and machine learning based approach for DDoS attacks detection in software defined networks

DDoS attack detection in software defined networking controller using machine learning techniques

A Deep Learning Based DDoS Detection System in Software-Defined Networking (SDN)

Overview of DDoS Attack Detection in Software-Defined Networks