Intelligent SDN to enhance security in IoT networks

被引:4
作者
Ibrahim, Safi [1 ]
Youssef, Aya M. [1 ]
Shoman, Mahmoud [1 ,2 ]
Taha, Sanaa [2 ]
机构
[1] Egyptian E Learning Univ, Dept Informat Technol, Giza, Egypt
[2] Cairo Univ, Fac Comp & Artificial Intelligence, Dept Informat Technol, Giza, Egypt
关键词
Software-defined networking; SDN; Security; DL models; InSDN dataset; SMOTE;
D O I
10.1016/j.eij.2024.100564
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
Software-defined networking (SDN) is a revolutionary technology that has revolutionised network management by providing flexibility and adaptability. As the popularity of SDN increases, it is crucial to address security vulnerabilities in these dynamic networks. This paper proposes a framework for enhancing security in SDN by utilising three separate Deep Learning models, namely Deep Neural Network (DNN), Convolutional Neural Network (CNN), and Long Short-Term Memory (LSTM). This framework is utilised for the InSDN dataset, a huge dataset specifically created for SDN security research. The dataset consists of a total of 343,939 instances, encompassing both normal and attack traffic. The regular data yields a sum of 68,424, whereas the attack traffic comprises 275,515 occurrences. This study employs multiclassification algorithms to precisely detect and categorise diverse security threats in SDN. The InSDN dataset faces issues related to class imbalance, which are addressed by using the Synthetic Minority Over-sampling Technique (SMOTE). The SMOTE technique is utilised to create artificial instances of the underrepresented class, hence achieving a more equitable distribution of security hazards within the dataset. This strategy improves the efficacy of multiclassification techniques, ultimately resulting in greater accuracy in the identification and classification of different security threats in SDN environments. The initial DNN model exhibited satisfactory performance, with an accuracy of 87%. The second CNN model demonstrated strong and consistent performance, with an accuracy rate of 99%. In addition, an LSTM model attained a 90% accuracy rate.
引用
收藏
页数:10
相关论文
共 33 条
[1]   Cyber Threats Detection in Smart Environments Using SDN-Enabled DNN-LSTM Hybrid Framework [J].
Al Razib, Mohammad ;
Javeed, Danish ;
Khan, Muhammad Taimoor ;
Alkanhel, Reem ;
Muthanna, Mohammed Saleh Ali .
IEEE ACCESS, 2022, 10 :53015-53026
[2]   Recurrent Neural Network Model Based on a New Regularization Technique for Real-Time Intrusion Detection in SDN Environments [J].
Albahar, Marwan Ali .
SECURITY AND COMMUNICATION NETWORKS, 2019, 2019
[3]   Novel Three-Tier Intrusion Detection and Prevention System in Software Defined Network [J].
Ali, Amir ;
Yousaf, Muhammad Murtaza .
IEEE ACCESS, 2020, 8 :109662-109676
[4]   Comparison of ML/DL Approaches for Detecting DDoS Attacks in SDN [J].
Ali, Tariq Emad ;
Chong, Yung-Wey ;
Manickam, Selvakumar .
APPLIED SCIENCES-BASEL, 2023, 13 (05)
[5]  
Benson Theophilus., 2009, NSDI
[6]   Network Anomaly Detection: Methods, Systems and Tools [J].
Bhuyan, Monowar H. ;
Bhattacharyya, D. K. ;
Kalita, J. K. .
IEEE COMMUNICATIONS SURVEYS AND TUTORIALS, 2014, 16 (01) :303-336
[7]  
BOUKRIA S., 2019, 2019 INT C THEOR APP, V1, P1
[8]  
Dawoud Ahmed, 2019, Transactions on Computational Collective Intelligence XXXIII. Lecture Notes in Computer Science (LNCS 11610), P167
[9]   Effects of Machine Learning Approach in Flow-Based Anomaly Detection on Software-Defined Networking [J].
Dey, Samrat Kumar ;
Rahman, Md. Mahbubur .
SYMMETRY-BASEL, 2020, 12 (01)
[10]   InSDN: A Novel SDN Intrusion Dataset [J].
Elsayed, Mahmoud Said ;
Le-Khac, Nhien-An ;
Jurcut, Anca D. .
IEEE ACCESS, 2020, 8 :165263-165284