返回
A DDoS Detection Method Based on Feature Engineering and Machine Learning in Software-Defined Networks
DOI:10.3390/s23136176.png)
摘要
En 中文
Distributed denial-of-service (DDoS) attacks pose a significant cybersecurity threat to software-defined networks (SDNs). This paper proposes a feature-engineering- and machine-learning-based approach to detect DDoS attacks in SDNs. First, the CSE-CIC-IDS2018 dataset was cleaned and normalized, and the optimal feature subset was found using an improved binary grey wolf optimization algorithm. Next, the optimal feature subset was trained and tested in Random Forest (RF), Support Vector Machine (SVM), K-Nearest Neighbor (k-NN), Decision Tree, and XGBoost machine learning algorithms, from which the best classifier was selected for DDoS attack detection and deployed in the SDN controller. The results show that RF performs best when compared across several performance metrics (e.g., accuracy, precision, recall, F1 and AUC values). We also explore the comparison between different models and algorithms. The results show that our proposed method performed the best and can effectively detect and identify DDoS attacks in SDNs, providing a new idea and solution for the security of SDNs.
Keyword:
software-defined networking
DDoS attacks
feature engineering
machine learning
binary grey wolf optimization algorithm
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.5
论文数:
7.2W
被引数:
20.9W
机构
引用论文
Detecting DDoS Attacks in Software-Defined Networks Through Feature Selection Methods and Machine Learning Models
SUSTAINABILITY
IF3.3
Deep Belief Network Integrating Improved Kernel-Based Extreme Learning Machine for Network Intrusion Detection
IEEE ACCESS
IF3.6
An Efficient IDS Framework for DDoS Attacks in SDN EnvironmentSDN环境下一种高效的DDoS攻击IDS框架
IEEE ACCESS
IF3.6

