Abstract:The development of smart network infrastructure of the Internet of Things (IoT) faces the immense threat of sophisticated Distributed Denial-of-Services (DDoS) security attacks. The existing network security solutions of enterprise networks are significantly expensive and unscalable for IoT. The integration of recently developed Software Defined Networking (SDN) reduces a significant amount of computational overhead for IoT network devices and enables additional security measurements. At the prelude stage of SDN-enabled IoT network infrastructure, the sampling based security approach currently results in low accuracy and low DDoS attack detection. In this paper, we propose an Adaptive Machine Learning based SDN-enabled Distributed Denial-of-Services attacks Detection and Mitigation (AMLSDM) framework. The proposed AMLSDM framework develops an SDN-enabled security mechanism for IoT devices with the support of an adaptive machine learning classification model to achieve the successful detection and mitigation of DDoS attacks. The proposed framework utilizes machine learning algorithms in an adaptive multilayered feed-forwarding scheme to successfully detect the DDoS attacks by examining the static features of the inspected network traffic. In the proposed adaptive multilayered feed-forwarding framework, the first layer utilizes Support Vector Machine (SVM), Naive Bayes (NB), Random Forest (RF), k-Nearest Neighbor (kNN), and Logistic Regression (LR) classifiers to build a model for detecting DDoS attacks from the training and testing environment-specific datasets. The output of the first layer passes to an Ensemble Voting (EV) algorithm, which accumulates the performance of the first layer classifiers. In the third layer, the adaptive frameworks measures the real-time live network traffic to detect the DDoS attacks in the network traffic. The proposed framework utilizes a remote SDN controller to mitigate the detected DDoS attacks over Open Flow (OF) switches and reconfigures the network resources for legitimate network hosts. The experimental results show the better performance of the proposed framework as compared to existing state-of-the art solutions in terms of higher accuracy of DDoS detection and low false alarm rate.

Toward a Real-Time TCP SYN Flood DDoS Mitigation Using Adaptive Neuro-Fuzzy Classifier and SDN Assistance in Fog Computing

Foggier Skies, Clearer Clouds: A Real-time IoT-DDoS Attack Mitigation Framework in Fog-Assisted Software-defined Cyber-Physical Systems

Adaptive Machine Learning Based Distributed Denial-of-Services Attacks Detection and Mitigation System for SDN-Enabled IoT

SDN-enabled Deep Learning Based Detection Mechanism (DDM) to Tackle DDoS Attacks in IoTs

CFADefense: A Security Solution to Detect and Mitigate Crossfire Attacks in Software-Defined IoT-Edge Infrastructure

FADM: DDoS Flooding Attack Detection and Mitigation System in Software-Defined Networking

Lightweight Statistical Approach towards TCP SYN Flood DDoS Attack Detection and Mitigation in SDN Environment

Towards Detecting Flooding DDOS Attacks Over Software Defined Networks Using Machine Learning Techniques

ONOS Flood Defender: An Intelligent Approach to Mitigate DDoS Attack in SDN

SYN Flood Attack Detection and Mitigation using Machine Learning Traffic Classification and Programmable Data Plane Filtering

Strengthening network DDOS attack detection in heterogeneous IoT environment with federated XAI learning approach

Adaptive Artificial Immune Networks for Mitigating DoS flooding Attacks

FIDS: Fuzzy Intrusion Detection System for simultaneous detection of DoS/DDoS attacks in Cloud computing

FLEAM: A Federated Learning Empowered Architecture to Mitigate DDoS in Industrial IoT

An Adaptive Nature-inspired Fog Architecture

Enhancement of an IoT hybrid intrusion detection system based on fog-to-cloud computing

Software Defined Machine Learning Based Anomaly Detection in Fog Based IoT Network

On an Integrated Security Framework for Defense Against Various DDoS Attacks in SDN.

Detection and Mitigation of DoS Attacks in Software Defined Networks

SDNDefender: AComprehensiveDDoSDefenseMechanismUsing Hybrid Approaches over Software Defined Networking

Realtime DDoS Defense Using COTS SDN Switches via Adaptive Correlation Analysis