Abstract:Software-defined networking will be a critical component of the networking domain as it transitions from a standard networking design to an automation network. To meet the needs of the current scenario, this architecture redesign becomes mandatory. Besides, machine learning (ML) and deep learning (DL) techniques provide a significant solution in network attack detection, traffic classification, etc. The DDoS attack is still wreaking havoc. Previous work for DDoS attack detection in SDN has not yielded significant results, so the author has used the most recent deep learning technique to detect the attacks. In this paper, we aim to classify the network traffic into normal and malicious classes based on features in the available dataset by using various deep learning techniques. TCP, UDP, and ICMP traffic are considered normal; however, malicious traffic includes TCP Syn Attack, UDP Flood, and ICMP Flood, all of which are DDoS attack traffic. The major contribution of this paper is the identification of novel features for DDoS attack detection. Novel features are logged into the CSV file to create the dataset, and machine learning algorithms are trained on the created SDN dataset. Various work which has already been done for DDoS attack detection either used a non-SDN dataset or the research data is not made public. A novel hybrid machine learning model is utilized to perform the classification. The dataset used by the ML/DL algorithms is a collection of public datasets on DDoS attacks as well as an experimental DDoS dataset generated by us and publicly available on the Mendeley Data repository. A Python application performs the classification of traffic into one of the classes. From the various classifiers used, the accuracy score of 99.75% is achieved with Stacked Auto-Encoder Multi-layer Perceptron (SAE-MLP). To measure the effectiveness of the SDN-DDoS dataset, the other publicly available datasets are also evaluated against the same deep learning algorithms, and traffic classification accuracy is found to be significantly higher with the SDN-DDoS dataset. The attack detection time of 216.39 s also serve as experimental evidence.

An Effective Classification of DDoS Attacks in a Distributed Network by Adopting Hierarchical Machine Learning and Hyperparameters Optimization Techniques

Improvement of Distributed Denial of Service Attack Detection through Machine Learning and Data Processing

A generalized machine learning model for DDoS attacks detection using hybrid feature selection and hyperparameter tuning

Predict And Prevent DDOS Attacks Using Machine Learning and Statistical Algorithms

Defensive mechanism against DDoS attack based on feature selection and multi-classifier algorithms

Detection of DDoS Attacks in Software Defined Networking Using Machine Learning Models

A Hybrid Approach for Efficient DDoS Detection in Network Traffic Using CBLOF-Based Feature Engineering and XGBoost

Machine learning-based detection of DDoS attacks on IoT devices in multi-energy systems

DDoS attack traffic classification in SDN using deep learning

Prediction Approach against DDoS Attack based on Machine Learning Multiclassfier

A Framework for Detecting Distributed Denial of Services Attack in Cloud Enviorment using Machine Learning Techniques

Hierarchical Classification for Intrusion Detection System: Effective Design and Empirical Analysis

Efficient Detection of DDoS Attacks Using a Hybrid Deep Learning Model with Improved Feature Selection

An evolutionary KNN model for DDoS assault detection using genetic algorithm based optimization

ML-Based Detection of DDoS Attacks Using Evolutionary Algorithms Optimization

A novel optimization-driven deep learning framework for the detection of DDoS attacks

Detecting DDoS Attacks in Software-Defined Networks Through Feature Selection Methods and Machine Learning Models

An Experimental Analysis of Attack Classification Using Machine Learning in IoT Networks

Detecting Distributed Denial of Service Attacks Using Logistic Regression and SVM Methods

Deep Learning-Based Approach for Detecting DDoS Attack on Software-Defined Networking Controller

Framework for Detecting Distributed Denial of Services Attack in Cloud Environment