Abstract:The development of smart network infrastructure of the Internet of Things (IoT) faces the immense threat of sophisticated Distributed Denial-of-Services (DDoS) security attacks. The existing network security solutions of enterprise networks are significantly expensive and unscalable for IoT. The integration of recently developed Software Defined Networking (SDN) reduces a significant amount of computational overhead for IoT network devices and enables additional security measurements. At the prelude stage of SDN-enabled IoT network infrastructure, the sampling based security approach currently results in low accuracy and low DDoS attack detection. In this paper, we propose an Adaptive Machine Learning based SDN-enabled Distributed Denial-of-Services attacks Detection and Mitigation (AMLSDM) framework. The proposed AMLSDM framework develops an SDN-enabled security mechanism for IoT devices with the support of an adaptive machine learning classification model to achieve the successful detection and mitigation of DDoS attacks. The proposed framework utilizes machine learning algorithms in an adaptive multilayered feed-forwarding scheme to successfully detect the DDoS attacks by examining the static features of the inspected network traffic. In the proposed adaptive multilayered feed-forwarding framework, the first layer utilizes Support Vector Machine (SVM), Naive Bayes (NB), Random Forest (RF), k-Nearest Neighbor (kNN), and Logistic Regression (LR) classifiers to build a model for detecting DDoS attacks from the training and testing environment-specific datasets. The output of the first layer passes to an Ensemble Voting (EV) algorithm, which accumulates the performance of the first layer classifiers. In the third layer, the adaptive frameworks measures the real-time live network traffic to detect the DDoS attacks in the network traffic. The proposed framework utilizes a remote SDN controller to mitigate the detected DDoS attacks over Open Flow (OF) switches and reconfigures the network resources for legitimate network hosts. The experimental results show the better performance of the proposed framework as compared to existing state-of-the art solutions in terms of higher accuracy of DDoS detection and low false alarm rate.

ALAM: Anonymous Lightweight Authentication Mechanism for SDN-Enabled Smart Homes

A lightweight group-based SDN-driven encryption protocol for smart home IoT devices

Anonymous Secure Framework in Connected Smart Home Environments

Adaptive Machine Learning Based Distributed Denial-of-Services Attacks Detection and Mitigation System for SDN-Enabled IoT

Design and analysis of a robust security layer for software defined network framework

An anonymous authentication and key agreement protocol in smart living

Lightweight authentication protocol for connected medical IoT through privacy-preserving access

Anonymous Authentication Scheme for Smart Home Environment with Provable Security

Improving Internet of Things (IoT) Security with Software-Defined Networking (SDN)

Efficient security level in wireless sensor networks (WSNs) using four-factors authentication over the Internet of Things (IoT)

A secure addressing mutual authentication scheme for smart IoT home network

Lightweight and Provable Secure Cross-Domain Access Control Scheme for Internet of Things (iot) Based Wireless Body Area Networks (WBAN).

How To Defend Against Sophisticated Intrusions In Home Networks Using Sdn And Nfv

ILAS-IoT: An improved and lightweight authentication scheme for IoT deployment

Efficient Cyber Security Framework for IoT Using Machine Learning Algorithms

A Robust and Anonymous Three-Factor Authentication Scheme Based ECC for Smart Home Environments

SDN-based detection and mitigation of DDoS attacks on smart homes

AHAC: Advanced Network-Hiding Access Control Framework

Secure, Anonymity-Preserving and Lightweight Mutual Authentication and Key Agreement Protocol for Home Automation IoT Networks

SELWAK: A Secure and Efficient Lightweight and Anonymous Authentication and Key Establishment Scheme for IoT Based Vehicular Ad Hoc Networks

Security Framework for IoT Devices against Cyber-Attacks