Optimized MLP-CNN Model to Enhance Detecting DDoS Attacks in SDN Environment

被引:16
作者
Setitra, Mohamed Ali [1 ]
Fan, Mingyu [1 ]
Agbley, Bless Lord Y. [2 ]
Bensalem, Zine El Abidine [1 ]
机构
[1] Univ Elect Sci & Technol China UESTC, Sch Comp Sci & Engn Cyberspace Secur, 2006 Xiyuan Ave, Chengdu 611731, Peoples R China
[2] Univ Elect Sci & Technol China UESTC, Sch Informat & Commun Engn, 2006 Xiyuan Ave, Chengdu 611731, Peoples R China
来源
NETWORK | 2023年 / 3卷 / 04期
关键词
SDN; DDoS attacks; deep learning; CNN; MLP; optimization; feature selection; PERFORMANCE;
D O I
10.3390/network3040024
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
In the contemporary landscape, Distributed Denial of Service (DDoS) attacks have emerged as an exceedingly pernicious threat, particularly in the context of network management centered around technologies like Software-Defined Networking (SDN). With the increasing intricacy and sophistication of DDoS attacks, the need for effective countermeasures has led to the adoption of Machine Learning (ML) techniques. Nevertheless, despite substantial advancements in this field, challenges persist, adversely affecting the accuracy of ML-based DDoS-detection systems. This article introduces a model designed to detect DDoS attacks. This model leverages a combination of Multilayer Perceptron (MLP) and Convolutional Neural Network (CNN) to enhance the performance of ML-based DDoS-detection systems within SDN environments. We propose utilizing the SHapley Additive exPlanations (SHAP) feature-selection technique and employing a Bayesian optimizer for hyperparameter tuning to optimize our model. To further solidify the relevance of our approach within SDN environments, we evaluate our model by using an open-source SDN dataset known as InSDN. Furthermore, we apply our model to the CICDDoS-2019 dataset. Our experimental results highlight a remarkable overall accuracy of 99.95% with CICDDoS-2019 and an impressive 99.98% accuracy with the InSDN dataset. These outcomes underscore the effectiveness of our proposed DDoS-detection model within SDN environments compared to existing techniques.
引用
收藏
页码:538 / 562
页数:25
相关论文
共 29 条
[1]   A new DDoS attacks intrusion detection model based on deep learning for cybersecurity [J].
Akgun, Devrim ;
Hizal, Selman ;
Cavusoglu, Unal .
COMPUTERS & SECURITY, 2022, 118
[2]   Machine Learning Techniques to Detect a DDoS Attack in SDN: A Systematic Review [J].
Ali, Tariq Emad ;
Chong, Yung-Wey ;
Manickam, Selvakumar .
APPLIED SCIENCES-BASEL, 2023, 13 (05)
[3]   On improving the performance of DDoS attack detection system [J].
Batchu, Raj Kumar ;
Seetha, Hari .
MICROPROCESSORS AND MICROSYSTEMS, 2022, 93
[4]   An integrated approach explaining the detection of distributed denial of service attacks [J].
Batchu, Raj Kumar ;
Seetha, Hari .
COMPUTER NETWORKS, 2022, 216
[5]   A generalized machine learning model for DDoS attacks detection using hybrid feature selection and hyperparameter tuning [J].
Batchu, Raj Kumar ;
Seetha, Hari .
COMPUTER NETWORKS, 2021, 200
[6]   Design and Development of Consensus Activation Function Enabled Neural Network-Based Smart Healthcare Using BIoT [J].
Benkhaddra, Ilyas ;
Kumar, Abhishek ;
Setitra, Mohamed Ali ;
Hang, Lei .
WIRELESS PERSONAL COMMUNICATIONS, 2023, 130 (03) :1549-1574
[7]  
Bindra N, 2020, ROM J INF SCI TECH, V23, P250
[8]   Short-long term anomaly detection in wireless sensor networks based on machine learning and multi-parameterized edit distance [J].
Cauteruccio, Francesco ;
Fortino, Giancarlo ;
Guerrieri, Antonio ;
Liotta, Antonio ;
Mocanu, Decebal Constantin ;
Perra, Cristian ;
Terracina, Giorgio ;
Vega, Maria Torres .
INFORMATION FUSION, 2019, 52 :13-30
[9]   An ensemble method for feature selection and an integrated approach for mitigation of distributed denial of service attacks [J].
Chanu, Usham Sanjota ;
Singh, Khundrakpam Johnson ;
Chanu, Yambem Jina .
CONCURRENCY AND COMPUTATION-PRACTICE & EXPERIENCE, 2022, 34 (13)
[10]  
Desai M., 2021, Clin eHealth, V4, P1, DOI DOI 10.1016/J.CEH.2020.11.002