Early Detection of Abnormal Attacks in Software-Defined Networking Using Machine Learning Approaches
Recent developments have made software-defined networking (SDN) a popular technology for solving the inherent problems of conventional distributed networks. The key benefit of SDN is the decoupling between the control plane and the data plane, which makes the network more flexible and easier to mana...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2022-06-01
|
| Series: | Symmetry |
| Subjects: | |
| Online Access: | https://www.mdpi.com/2073-8994/14/6/1178 |
| _version_ | 1797482014617632768 |
|---|---|
| author | Hsiu-Min Chuang Fanpyn Liu Chung-Hsien Tsai |
| author_facet | Hsiu-Min Chuang Fanpyn Liu Chung-Hsien Tsai |
| author_sort | Hsiu-Min Chuang |
| collection | DOAJ |
| description | Recent developments have made software-defined networking (SDN) a popular technology for solving the inherent problems of conventional distributed networks. The key benefit of SDN is the decoupling between the control plane and the data plane, which makes the network more flexible and easier to manage. SDN is a new generation network architecture; however, its configuration settings are centralized, making it vulnerable to hackers. Our study investigated the feasibility of applying artificial intelligence technology to detect abnormal attacks in an SDN environment based on the current unit network architecture; therefore, the concept of symmetry includes the sustainability of SDN applications and robust performance of machine learning (ML) models in the case of various malicious attacks. In this study, we focus on the early detection of abnormal attacks in an SDN environment. On detection of malicious traffic in SDN topology, the AI module in the topology is applied to detect and act against the attack source through machine learning algorithms, making the network architecture more flexible. Under multiple abnormal attacks, we propose a hierarchical multi-class (HMC) architecture to effectively address the imbalanced dataset problem and improve the performance of minority classes. The experimental results show that the decision tree, random forest, bagging, AdaBoost, and deep learning models exhibit the best performance for distributed denial-of-service (DDoS) attacks. In addition, for the imbalanced dataset problem of multiclass classification, our proposed HMC architecture performs better than previous single classifiers. We also simulated the SDN topology and scenario verification. In summary, we concatenated the AI module to enhance the security and effectiveness of SDN networks in a practical manner. |
| first_indexed | 2024-03-09T22:22:14Z |
| format | Article |
| id | doaj.art-793892cab5c84127964529f4f684cbdd |
| institution | Directory Open Access Journal |
| issn | 2073-8994 |
| language | English |
| last_indexed | 2024-03-09T22:22:14Z |
| publishDate | 2022-06-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Symmetry |
| spelling | doaj.art-793892cab5c84127964529f4f684cbdd2023-11-23T19:12:06ZengMDPI AGSymmetry2073-89942022-06-01146117810.3390/sym14061178Early Detection of Abnormal Attacks in Software-Defined Networking Using Machine Learning ApproachesHsiu-Min Chuang0Fanpyn Liu1Chung-Hsien Tsai2Department of Computer Science and Information Engineering, Chung Cheng Institute of Technology, National Defense University, Taoyuan City 335, TaiwanDepartment of Computer Science and Information Engineering, Chung Cheng Institute of Technology, National Defense University, Taoyuan City 335, TaiwanDepartment of Computer Science and Information Engineering, Chung Cheng Institute of Technology, National Defense University, Taoyuan City 335, TaiwanRecent developments have made software-defined networking (SDN) a popular technology for solving the inherent problems of conventional distributed networks. The key benefit of SDN is the decoupling between the control plane and the data plane, which makes the network more flexible and easier to manage. SDN is a new generation network architecture; however, its configuration settings are centralized, making it vulnerable to hackers. Our study investigated the feasibility of applying artificial intelligence technology to detect abnormal attacks in an SDN environment based on the current unit network architecture; therefore, the concept of symmetry includes the sustainability of SDN applications and robust performance of machine learning (ML) models in the case of various malicious attacks. In this study, we focus on the early detection of abnormal attacks in an SDN environment. On detection of malicious traffic in SDN topology, the AI module in the topology is applied to detect and act against the attack source through machine learning algorithms, making the network architecture more flexible. Under multiple abnormal attacks, we propose a hierarchical multi-class (HMC) architecture to effectively address the imbalanced dataset problem and improve the performance of minority classes. The experimental results show that the decision tree, random forest, bagging, AdaBoost, and deep learning models exhibit the best performance for distributed denial-of-service (DDoS) attacks. In addition, for the imbalanced dataset problem of multiclass classification, our proposed HMC architecture performs better than previous single classifiers. We also simulated the SDN topology and scenario verification. In summary, we concatenated the AI module to enhance the security and effectiveness of SDN networks in a practical manner.https://www.mdpi.com/2073-8994/14/6/1178machine learningmulticlass classificationSDNabnormal detectionimbalance dataset |
| spellingShingle | Hsiu-Min Chuang Fanpyn Liu Chung-Hsien Tsai Early Detection of Abnormal Attacks in Software-Defined Networking Using Machine Learning Approaches Symmetry machine learning multiclass classification SDN abnormal detection imbalance dataset |
| title | Early Detection of Abnormal Attacks in Software-Defined Networking Using Machine Learning Approaches |
| title_full | Early Detection of Abnormal Attacks in Software-Defined Networking Using Machine Learning Approaches |
| title_fullStr | Early Detection of Abnormal Attacks in Software-Defined Networking Using Machine Learning Approaches |
| title_full_unstemmed | Early Detection of Abnormal Attacks in Software-Defined Networking Using Machine Learning Approaches |
| title_short | Early Detection of Abnormal Attacks in Software-Defined Networking Using Machine Learning Approaches |
| title_sort | early detection of abnormal attacks in software defined networking using machine learning approaches |
| topic | machine learning multiclass classification SDN abnormal detection imbalance dataset |
| url | https://www.mdpi.com/2073-8994/14/6/1178 |
| work_keys_str_mv | AT hsiuminchuang earlydetectionofabnormalattacksinsoftwaredefinednetworkingusingmachinelearningapproaches AT fanpynliu earlydetectionofabnormalattacksinsoftwaredefinednetworkingusingmachinelearningapproaches AT chunghsientsai earlydetectionofabnormalattacksinsoftwaredefinednetworkingusingmachinelearningapproaches |