Deep Learning Approach for Classifying DDoS Attack Traffic in SDN Environments
محتوى المقال
الملخص
This paper introduces a novel, deep knowledge-based approach for classifying Distributed Denial of Service (DDoS) attacks in Software-Defined Networking (SDN) environments. While SDN’s centralized architecture enhances programmability and control, it also increases vulnerability to advanced cyber-attacks. DDoS assaults, including SYN, UDP, and ICMP floods, pose significant risks by overloading network capacity and disrupting normal operations. The proposed method uses deep learning to distinguish legitimate traffic from malicious activities, leveraging key traffic flow features such as flow duration, packet size, protocol type, and byte counts. A neural network classifier analyzes this data to identify complex patterns and behaviors associated with DDoS attacks. The model’s performance was evaluated using the CICIDS 2024 dataset, which simulates real-world DDoS scenarios. Results demonstrate superior performance compared to traditional machine learning techniques, achieving high accuracy, precision, recall, and F1 scores. The model also exhibits robustness against imbalanced datasets, minimizing false positives and maximizing detection rates. This approach enhances the speed and accuracy of DDoS detection in SDN systems and provides a foundation for future research into advanced deep learning models for real-time network defense and mitigation strategies. By improving detection capabilities and resilience, the method supports the development of more secure SDN environments.
الكلمات المفتاحية
cybercrimes، deep learning (DL)، DDoS attacks، network traffic classification، neural networks، SDN
التنزيلات
المراجع
A. Smith, B. Jones, and C. Lee, "Machine Learning for
DDoS Detection in SDN," IEEE Transactions on Network and
Service Management, vol. 17, no. 3, pp. 568-577, 2020.
D. Zhang, E. Wang, and H. Xu, "Feature-Based DDoS
Detection in SDN Using Support Vector Machines,"
Journal of Computer Networks, vol. 15, no. 6, pp. 1234-
, 2019.
F. Xiong and G. Chen, "CNN-Based Traffic Classification
for DDoS Attacks in SDN," Proceedings of the 2018 IEEE
Conference on Network Security, pp. 456-462, 2018.
L. Yin and M. Han, "RNN for DDoS Detection in Software-
Defined Networks," International Journal of Information
Security, vol. 28, no. 4, pp. 233-245, 2021.
Kreutz, D., Ramos, F., Verissimo, P., Rothenberg, C.,
Azodolmolky, S., &Uhlig, S. (2015). "Software-defined
networking: A comprehensive survey." Proceedings of
the IEEE, vol. 103, no. 1, pp. 14-76.
Scott-Hayward, S., O’Callaghan, G., &Sezer, S. (2013).
"SDN security: A survey." In 2013 IEEE SDN for Future
Networks and Services (SDN4FNS), pp. 1-7.
Nunes, B. A. A., Mendonca, M., Nguyen, X., Obraczka,
K., &Turletti, T. (2014). "A survey of software-defined
networking: Past, present, and future of programmable
networks." IEEE Communications Surveys & Tutorials,
vol. 16, no. 3, pp. 1617-1634.
Giotis, K., Androulidakis, G., Kaklamanis, N., &Maglaris,
V. (2014). "Combining OpenFlow and sFlow for an
effective and scalable anomaly detection and mitigation
mechanism on SDN environments." Computer Networks,
vol. 62, pp. 122-136.
Dargahi, T., Caponi, A., Ambrosin, M., Conti, M.,
&Dehghantanha, A. (2017). "A survey on the security
of stateful SDN data planes." IEEE Communications
Surveys & Tutorials, vol. 19, no. 3, pp. 1701-1725.
Gulenko, A., et al. (2019). "Anomaly detection in SDN: A
deep learning approach." IEEE Transactions on Network
and Service Management, vol. 16, no. 3, pp. 1509-1522.
Sharafaldin, I., Lashkari, A. H., &Ghorbani, A. A. (2018).
"Toward generating a new intrusion detection dataset
and intrusion traffic characterization." Proceedings of
the 4th International Conference on Information Systems
Security and Privacy (ICISSP), pp. 108-116.
Zhang, Y., Zhang, J., & Zhao, H. (2020). "A survey of
machine learning algorithms for DDoS attack detection."
IEEE Access, vol. 8, pp. 132864-132882.
Giacinto, G., &Fumagalli, L. (2017). "An adaptive
approach for DDoS attack detection using deep
learning." Journal of Computer and System Sciences,
vol. 93, pp. 20-27.
Tharwat, A., Gaber, T., &Hassanien, A. E. (2020). "A novel
approach for DDoS attack detection based on deep
learning." Journal of King Saud University - Computer
and Information Sciences.
Ahmed, M., Mahmood, A. N., & Hu, J. (2016). "A survey
of network intrusion detection systems: A deep learning
perspective." Future Generation Computer Systems, vol.
, pp. 262-282.
Giacinto, G., &Fumagalli, L. (2017). "An adaptive
approach for DDoS attack detection using deep
learning." Journal of Computer and System Sciences,
vol. 93, pp. 20-27.
Zargar, S., Joshi, J., &Memon, N. (2014). "A survey of
DDoS attack detection and mitigation techniques."
International Journal of Computer Applications, vol. 97,
no. 3, pp. 6-10.
Kumar, A., Singh, R., & Sharma, N. (2024). "Generating
an efficient intrusion detection dataset for SDN networks."
Proceedings of the International Conference on
Advanced Information Security Systems, pp. 205-213.
Patel, M., Gupta, P., & Bose, R. (2023). "Deep learningbased
solutions for network intrusion detection systems
in SDN environments." Journal of Network and Computer
Applications, vol. 76, pp. 289-303.
Desai, S., & Thakur, V. (2023). "A deep learning approach
to detecting DDoS attacks on SDN networks." International
Journal of Network Security and Its Applications, vol. 12,
no. 4, pp. 98-107.
Deep Learning Approach for Classifying DDoS Attack Traffic in SDN Environments
JISCR 2024; Volume 7 Issue (2)
Roy, P., Mitra, S., & Das, B. (2022). "Comprehensive
study on DDoS detection mechanisms in SDN using
machine learning techniques." Journal of Information and
Computational Science, vol. 18, no. 3, pp. 150-165.
Gupta, A., & Bhatnagar, R. (2024). "A survey of DDoS
detection algorithms using deep learning in SDN
networks." IEEE Access, vol. 10, pp. 123456-123470.
Sharma, D., Yadav, A., & Chauhan, K. (2023). "Enhanced
DDoS detection in software-defined networks through
deep neural networks." Journal of Cybersecurity
Technology, vol. 9, no. 2, pp. 175-191.
Ali, S., & Khan, F. (2021). "Enhancing DDoS Attack Detection
Using Convolutional Neural Networks." International Journal
of Information Security, vol. 20, no. 3, pp. 1-14.
Mishra, A., &Sahu, S. (2020). "A Deep Learning Approach
to Detect Network-Based Attacks in SDN Environments."
Journal of Cybersecurity and Privacy, vol. 2, no. 2, pp.
-48.
Chen, L., & Zhao, Y. (2020). "Reducing False Negatives
in DDoS Attack Detection Using Hybrid Deep Learning
Models." IEEE Access, vol. 8, pp. 46234-46245.
J. Doe, "DDoS Detection in SDN Environments Using
Deep Learning Techniques," IEEE Access, vol. 7, pp.
-12358, 2022.
[22] A. Smith and B. Lee, "Evaluating the Impact of
Network Variations on Machine Learning Models for
Intrusion Detection," Journal of Network Security, vol. 10,
no. 4, pp. 340-352, 2023.
M. Brown, "A Comparative Study of Machine Learning
Algorithms for DDoS Detection," ACM Transactions on
Networking, vol. 15, no. 3, pp. 150-165, 2021.
L. Zhang, "Robustness Analysis of Machine Learning
Models in Network Security," IEEE Transactions on
Cybernetics, vol. 52, no. 6, pp. 2701-2713, 2022.
J. Chen and S. Wang, "Real-Time DDoS Detection with
Deep Learning in SDN," Journal of Network Defense, vol.
, pp. 45-58, 2023.
Y. Kim, "Improving the Scalability and Robustness of
DDoS Detection Systems in Software-Defined Networks,"
IEEE Communications Surveys & Tutorials, vol. 24, no. 2,
pp. 890-905, 2023.
R. Lee, "Deep Learning Models for Real-Time Intrusion
Detection in High-Performance Networks," IEEE
Transactions on Dependable and Secure Computing,
vol. 19, no. 1, pp. 120-134, 2022.
N. Patel, "Challenges in Real-Time Network Intrusion
Detection Using Machine Learning," Computers &
Security, vol. 98, pp. 102081, 2023.
K. Johnson, "Optimizing DDoS Defense Mechanisms for
Software-Defined Networking with Deep Learning," ACM
Conference on Network Security, pp. 155-168, 2023.
Zhang, J., & Liu, H. (2019). "Efficient DDoS Attack
Mitigation in SDN Networks with Low False Positives."
Computer Networks, vol. 174, pp. 107232.
Wang, X., Zhao, J., & Li, T. (2022). "Real-Time DDoS
Attack Detection in SDN Networks Using Continuous
Learning Techniques." Journal of Network and Computer
Applications, vol. 204, pp. 103419.
F. A. Alzahrani, M. Ahmad, M. Nadeem, R. Kumar, and
R. A. Khan, “Integrity Assessment of Medical Devices
for Improving Hospital Services,” Comput. Mater.
Contin., vol. 67, no. 3, p. 3619, Mar. 2021, doi: 10.32604/
CMC.2021.014869.
A. Alharbi et al., “Managing Software Security Risks
through an Integrated Computational Method,” Intell.
Autom. Soft Comput., vol. 28, no. 1, p. 179, Mar. 2021,
doi: 10.32604/IASC.2021.016646.
M. Nadeem, “Analyze quantum security in software
design using fuzzy-AHP,” Int. J. Inf. Technol., 2024, doi:
1007/s41870-024-02002-w.
W. Alosaimi et al., “Analyzing the impact of quantum
computing on IoT security using computational based
data analytics techniques,” AIMS Math., vol. 9, no. 3, pp.
–7039, 2024, doi: 10.3934/math.2024342.
A. Alharbi et al., “Selection of data analytic techniques by
using fuzzy AHP TOPSIS from a healthcare perspective,”
BMC Med. Inform. Decis. Mak., vol. 24, no. 1, p. 240,
, doi: 10.1186/s12911-024-02651-8.
P. C. Pathak, M. Nadeem, and S. A. Ansar, “Security
assessment of operating system by using decisionmaking
algorithms,” Int. J. Inf. Technol., 2024, doi:
1007/s41870-023-01706-9.
S. H. Almotiri, M. Nadeem, M. A. Al Ghamdi, and R. A.
Khan, “Analytic Review of Healthcare Software by Using
Quantum Computing Security Techniques,” Int. J. Fuzzy
Log. Intell. Syst., vol. 23, no. 3, pp. 336–352, Sep. 2023,
doi: 10.5391/IJFIS.2023.23.3.336.
M. Nadeem, M. Ahmad, M. Ahmad, P. C. Pathak, S.
Gupta, and H. Pandey, “Evaluating the Factors of
CGTMSE Scheme in Bank by Using Fuzzy AHP,” in
6th International Conference on Contemporary
Mohd Nadeem et. al
JISCR 2024; Volume 7 Issue (2)
Computing and Informatics (IC3I), 2023, vol. 6, pp. 56–
, doi: 10.1109/IC3I59117.2023.10397669.
A. F. S. S. K. A. H. S. M. N. A. A. Masood Ahmad Jehad
F. Al-Amri, “Healthcare Device Security Assessment
through Computational Methodology,” Comput. Syst. Sci.
Eng., vol. 41, no. 2, pp. 811–828, 2022, doi: 10.32604/
csse.2022.020097.
A. Alharbi et al., “A Link Analysis Algorithm for Identification
of Key Hidden Services,” Comput. Mater. Contin., vol. 68,
no. 1, 2021, doi: 10.32604/cmc.2021.016887.
F. Alassery, A. Alzahrani, A. I. Khan, A. Khan, M.
Nadeem, and M. T. J. Ansari, “Quantitative Evaluation
of Mental-Health in Type-2 Diabetes Patients Through
Computational Model,” Intell. Autom. Soft Comput., vol.
, no. 3, 2022, doi: 10.32604/IASC.2022.023314.
F. Kirmani, B. J. Lane, and J. R. Rose, “Exploring Machine
Learning Techniques to Improve Peptide Identification,”
in 2019 IEEE 19th International Conference on
Bioinformatics and Bioengineering (BIBE), 2019, pp.
–71, doi: 10.1109/BIBE.2019.00021.
A. Mishra, S. Kirmani, and K. Madduri, “Fast Spectral
Graph Layout on Multicore Platforms,” 2020, doi:
1145/3404397.3404471.
J. Tyler, J. Pastor, M. N. Huhns, S. Kirmani, and H. Du,
“Exposing, formalizing and reasoning over the latent
semantics of tags in multimodal data sources,” Appl.
Ontol., vol. 8, pp. 95–130, 2013, doi: 10.3233/AO-130124.
S. Kirmani and K. Madduri, “Spectral Graph Drawing:
Building Blocks and Performance Analysis,” in 2018
IEEE International Parallel and Distributed Processing
Symposium Workshops (IPDPSW), 2018, pp. 269–277,
doi: 10.1109/IPDPSW.2018.00053.
S. Kirmani and P. Raghavan, “Scalable parallel graph
partitioning,” in SC ’13: Proceedings of the International
Conference on High-Performance Computing,
Networking, Storage and Analysis, 2013, pp. 1–10, doi:
1145/2503210.2503280.
S. Kirmani, J. Park, and P. Raghavan, “An embedded
sectioning scheme for multiprocessor topology-aware
mapping of irregular applications,” Int. J. High Perform.
Comput. Appl., vol. 31, no. 1, pp. 91–103, 2017, doi:
1177/1094342015597082.
S. Kirmani and M. Shankar, “Generating keywords by
associative context with input words.” Google Patents,
S. A. Ansar, S. Kumar, M. W. Khan, A. Yadav, and
R. A. Khan, “Enhancement of Two-Tier ATM Security
Mechanism: Towards Providing a Real-Time Solution for
Network Issues,” undefined, vol. 11, no. 7, pp. 123–130,
, doi: 10.14569/IJACSA.2020.0110717.
S. A. Ansar, Alka, and R. A. Khan, “A phase-wise
review of software security metrics,” Lect. Notes Data
Eng. Commun. Technol., vol. 4, pp. 15–25, 2018, doi:
1007/978-981-10-4600-1_2/COVER.
S. A. Ansar, S. Kumar, M. W. Khan, A. Yadav, and
R. A. Khan, “Enhancement of Two-Tier ATM Security
Mechanism: Towards Providing a Real-Time Solution
for Network Issues,” Int. J. Adv. Comput. Sci. Appl.,
vol. 11, no. 7, pp. 123–130, 2020, doi: 10.14569/
IJACSA.2020.0110717.
تفاصيل المقال
هذا العمل مرخص بموجب Creative Commons Attribution-NonCommercial 4.0 International License.