ML-SDNIDS: an attack detection mechanism for SDN based on machine learning
by Xian Guo; Wei Bai
International Journal of Information and Computer Security (IJICS), Vol. 19, No. 1/2, 2022

Abstract: With the rapid development of network technology, there are more and more application scenarios of software defined networking (SDN), such as big data, cloud computing, internet of things, etc. However, the facilities in the SDN network face security issues such as DDoS attacks, network monitoring, and privacy. In addition, the SDN controller is also the main target of the attacker. This paper makes a simple analysis of the security risks in SDN and proposes a machine learning-based intrusion detection system for SDN (ML-SDNIDS). According to the characteristics of SDN, ML-SDNIDS uses autoencoder and one-class support vector machine algorithm to train intrusion detection model in the control plane, and uses P4 programming language combined with machine learning algorithm to realise real-time intrusion detection function in the data plane. And compared with the traditional SVM and OCSVM intrusion detection models in the latest intrusion detection dataset CIC-DDoS2019, the experimental results show that the scheme proposed in this paper has greatly improved the detection accuracy and the execution efficiency of the model. In addition, this experimental scheme can make the intrusion detection accuracy of data plane P4 switch as high as 97%, and its packet transmission efficiency is still millisecond.

Online publication date: Fri, 04-Nov-2022

The full text of this article is only available to individual subscribers or to users at subscribing institutions.

 
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.

Pay per view:
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.

Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Information and Computer Security (IJICS):
Login with your Inderscience username and password:

Username:        Password:          Forgotten your password?

Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.

If you still need assistance, please email subs@inderscience.com