返回
A novel DDoS detection method using multi-layer stacking in SDN environment
DOI:10.1016/j.compeleceng.2024.109769.png)
摘要
En 中文
Software Defined Network (SDN) offers virtualized services compatible with infrastructure hosted computing, presenting a flexible, adaptive, and economical network architecture. Switches used in SDN prioritize packet matching in flow tables above packet processing, leaving them open to Denial of Service (DoS) attacks. These attacks, exemplified by Distributed Denial of Service Attacks (DDoS), target a victim while using many infected workstations at once. Due to its scalability and programmability, SDN is being used more and more for network management. However, it has specific security concerns, such as the controller's susceptibility to cyberattacks, which might result in a single point of failure and network-wide risks. This study proposes a novel DDoS prediction model by developing stacking classifier model consisting of multiple base classifiers for an SDN environment. The proposed model is built on stacking several classifiers at the base level and the Meta level, which mixes varied or heterogeneous learners to provide reliable model results. The findings demonstrate that the proposed stacking model outperforms other existing models with respect to accuracy, sensitivity, specificity, precision, and F1 score. Finally, the stacking classifier model is evaluated in terms of binary classification. The evaluation shows the highest AUC of 0.9537 whereas Random Forest, Decision Tree, and Logistic Regression achieve AUC values around 0.93-0.95.
Keyword:
Software-Defined Network (SDN)
DDoS attacks
Machine learning (ML)
Stacking classifier
RYU
期刊
C
IF:
4.9
论文数:
6.7K
被引数:
1.3W
机构
引用论文
An autonomous 16 mm/sup 3/ solar-powered node for distributed wireless sensor networks用于分布式无线传感器网络的自治16毫米/sup3/太阳能节点
A Review of Advances in Dielectric and Electrical Conductivity Measurement in Soils Using Time Domain Reflectometry时域反射仪在土壤介电和电导率测量中的研究进展
The Role of Zinc Chloride in Enhancing Mechanical, Thermal and Electrical Performance of Ethylene Vinyl Acetate/Carbonized Wood Fiber Conductive Composite
Polymers
IF0
Detection and Classification of DDoS Flooding Attacks on Software-Defined Networks: A Case Study for the Application of Machine Learning软件定义网络DDoS泛洪攻击的检测与分类 -- 以机器学习应用为例
IEEE ACCESS
IF3.6

