Feature-Selection-Based DDoS Attack Detection Using AI Algorithms

被引:5
作者
Raza, Muhammad Saibtain [1 ]
Sheikh, Mohammad Nowsin Amin [1 ]
Hwang, I-Shyan [1 ]
Ab-Rahman, Mohammad Syuhaimi [2 ]
机构
[1] Yuan Ze Univ, Dept Comp Sci & Engn, Taoyuan 32003, Taiwan
[2] Univ Kebangsaan Malaysia, Elect & Elect Engn Dept, Bangi 43600, Selangor, Malaysia
来源
TELECOM | 2024年 / 5卷 / 02期
关键词
SDN; DDoS attack; feature selection; machine learning techniques;
D O I
10.3390/telecom5020017
中图分类号
TN [电子技术、通信技术];
学科分类号
0809 ;
摘要
SDN has the ability to transform network design by providing increased versatility and effective regulation. Its programmable centralized controller gives network administration employees more authority, allowing for more seamless supervision. However, centralization makes it vulnerable to a variety of attack vectors, with distributed denial of service (DDoS) attacks posing a serious concern. Feature selection-based Machine Learning (ML) techniques are more effective than traditional signature-based Intrusion Detection Systems (IDS) at identifying new threats in the context of defending against distributed denial of service (DDoS) attacks. In this study, NGBoost is compared with four additional machine learning (ML) algorithms: convolutional neural network (CNN), Stochastic Gradient Descent (SGD), Decision Tree, and Random Forest, in order to assess the effectiveness of DDoS detection on the CICDDoS2019 dataset. It focuses on important measures such as F1 score, recall, accuracy, and precision. We have examined NeTBIOS, a layer-7 attack, and SYN, a layer-4 attack, in our paper. Our investigation shows that Natural Gradient Boosting and Convolutional Neural Networks, in particular, show promise with tabular data categorization. In conclusion, we go through specific study results on protecting against attacks using DDoS. These experimental findings offer a framework for making decisions.
引用
收藏
页码:333 / 346
页数:14
相关论文
共 29 条
[1]  
Ahmed ME, 2017, IEEE MILIT COMMUN C, P11, DOI 10.1109/MILCOM.2017.8170802
[2]   Automated DDOS attack detection in software defined networking [J].
Ahuja, Nisha ;
Singal, Gaurav ;
Mukhopadhyay, Debajyoti ;
Kumar, Neeraj .
JOURNAL OF NETWORK AND COMPUTER APPLICATIONS, 2021, 187 (187)
[3]   DLSDN: Deep Learning for DDOS attack detection in Software Defined Networking [J].
Ahuja, Nisha ;
Singal, Gaurav ;
Mukhopadhyay, Debajyoti .
2021 11TH INTERNATIONAL CONFERENCE ON CLOUD COMPUTING, DATA SCIENCE & ENGINEERING (CONFLUENCE 2021), 2021, :683-688
[4]  
[Anonymous], 2019, Internet growth usage statistics Internet
[5]  
Bakker JN, 2018, 2018 27TH INTERNATIONAL CONFERENCE ON COMPUTER COMMUNICATION AND NETWORKS (ICCCN)
[6]   SYN Flood Attack Detection and Mitigation using Machine Learning Traffic Classification and Programmable Data Plane Filtering [J].
Dimolianis, Marinos ;
Pavlidis, Adam ;
Maglaris, Vasilis .
2021 24TH CONFERENCE ON INNOVATION IN CLOUDS, INTERNET AND NETWORKS AND WORKSHOPS (ICIN), 2021,
[7]   DDoS Attack Detection Method Based on Improved KNN With the Degree of DDoS Attack in Software-Defined Networks [J].
Dong, Shi ;
Sarem, Mudar .
IEEE ACCESS, 2020, 8 :5039-5048
[8]  
Duan T, 2020, PR MACH LEARN RES, V119
[9]  
Hossain M.A., 2018, Int. J. Comput. Netw. Commun. (IJCNC), V10, P27, DOI [10.5121/ijcnc.2018.10502, DOI 10.5121/IJCNC.2018.10502]
[10]   A Scalable Real-Time Framework for DDoS Traffic Monitoring and Characterization [J].
Huyn, Joojay .
BDCAT'17: PROCEEDINGS OF THE FOURTH IEEE/ACM INTERNATIONAL CONFERENCE ON BIG DATA COMPUTING, APPLICATIONS AND TECHNOLOGIES, 2017, :265-266