Abstract:Due to the large computational overhead, underutilization of features, and high bandwidth consumption in traditional SDN environments for DDoS attack detection and mitigation methods, this paper proposes a two-stage detection and mitigation method for DDoS attacks in SDN based on multi-dimensional characteristics. Firstly, an analysis of the traffic statistics from the SDN switch ports is performed, which aids in conducting a coarse-grained detection of DDoS attacks within the network. Subsequently, a Multi-Dimensional Deep Convolutional Classifier (MDDCC) is constructed using wavelet decomposition and convolutional neural networks to extract multi-dimensional characteristics from the traffic data passing through suspicious switches. Based on these extracted multi-dimensional characteristics, a simple classifier can be employed to accurately detect attack samples. Finally, by integrating graph theory with restrictive strategies, the source of attacks in SDN networks can be effectively traced and isolated. The experimental results indicate that the proposed method, which utilizes a minimal amount of statistical information, can quickly and accurately detect attacks within the SDN network. It demonstrates superior accuracy and generalization capabilities compared to traditional detection methods, especially when tested on both simulated and public datasets. Furthermore, by isolating the affected nodes, the method effectively mitigates the impact of the attacks, ensuring the normal transmission of legitimate traffic during network attacks. This approach not only enhances the detection capabilities but also provides a robust mechanism for containing the spread of cyber threats, thereby safeguarding the integrity and performance of the network.

Machine-learning-based optical spectrum feature analysis for DoS attack detection in IP over optical networks

Low-rate DoS Attack Detection Method Based on Hybrid Deep Neural Networks.

Optical Spectrum Feature Analysis and Recognition for Optical Network Security with Machine Learning

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Detection and Response of Low-Rate TCP-targeted Denial of Service Attacks

Fighting Fire with Light: A Case for Defending DDoS Attacks Using the Optical Layer

A DDoS Detection Method Based on Feature Engineering and Machine Learning in Software-Defined Networks

Security Issues and Possible Solutions of Future-Oriented Optical Access Networks for 5G and Beyond

Machine Learning with Service Classification for Detecting Control Plane Intrusions in Software Defined Optical Networks

Neural-network-based hardware trojan attack prediction and security defense mechanism in optical networks-on-chip

LDoS attack detection method based on traffic time-frequency characteristics

Traffic Feature Selection and Distributed Denial of Service Attack Detection in Software-Defined Networks Based on Machine Learning

Performance and Features: Mitigating the Low-Rate TCP-Targeted DoS Attack via SDN

DDoS Attack Detection under SDN Context

Forecasting loss of signal in optical networks with machine learning

Machine Learning for Self-Coherent Detection Short-Reach Optical Communications

A Novel Distributed Denial-of-Service Attack Detection Scheme for Software Defined Networking Environments.

Reflective Distributed Denial of Service Detection: A Novel Model Utilizing Binary Particle Swarm Optimization—Simulated Annealing for Feature Selection and Gray Wolf Optimization-Optimized LightGBM Algorithm

A hybrid deep learning model based low‐rate DoS attack detection method for software defined network

Detection and mitigation of DDoS attacks based on multi-dimensional characteristics in SDN