Distributed Denial of Services (DDoS) attack detection in SDN using Optimizer-equipped CNN-MLP.
Software-Defined Networks (SDN) provides more control and network operation over a network infrastructure as an emerging and revolutionary paradigm in networking. Operating the many network applications and preserving the network services and functions, the SDN controller is regarded as the operatin...
Saved in:
| Main Authors: | , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Public Library of Science (PLoS)
2025-01-01
|
| Series: | PLoS ONE |
| Online Access: | https://doi.org/10.1371/journal.pone.0312425 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1832540212641660928 |
|---|---|
| author | Sajid Mehmood Rashid Amin Jamal Mustafa Mudassar Hussain Faisal S Alsubaei Muhammad D Zakaria |
| author_facet | Sajid Mehmood Rashid Amin Jamal Mustafa Mudassar Hussain Faisal S Alsubaei Muhammad D Zakaria |
| author_sort | Sajid Mehmood |
| collection | DOAJ |
| description | Software-Defined Networks (SDN) provides more control and network operation over a network infrastructure as an emerging and revolutionary paradigm in networking. Operating the many network applications and preserving the network services and functions, the SDN controller is regarded as the operating system of the SDN-based network architecture. The SDN has several security problems because of its intricate design, even with all its amazing features. Denial-of-service (DoS) attacks continuously impact users and Internet service providers (ISPs). Because of its centralized design, distributed denial of service (DDoS) attacks on SDN are frequent and may have a widespread effect on the network, particularly at the control layer. We propose to implement both MLP (Multilayer Perceptron) and CNN (Convolutional Neural Networks) based on conventional methods to detect the Denial of Services (DDoS) attack. These models have got a complex optimizer installed on them to decrease the false positive or DDoS case detection efficiency. We use the SHAP feature selection technique to improve the detection procedure. By assisting in the identification of which features are most essential to spot the incidents, the approach aids in the process of enhancing precision and flammability. Fine-tuning the hyperparameters with the help of Bayesian optimization to obtain the best model performance is another important thing that we do in our model. Two datasets, InSDN and CICDDoS-2019, are utilized to assess the effectiveness of the proposed method, 99.95% for the true positive (TP) of the CICDDoS-2019 dataset and 99.98% for the InSDN dataset, the results show that the model is highly accurate. |
| format | Article |
| id | doaj-art-d00119ac43eb49cdbea99dd13ec4d076 |
| institution | Kabale University |
| issn | 1932-6203 |
| language | English |
| publishDate | 2025-01-01 |
| publisher | Public Library of Science (PLoS) |
| record_format | Article |
| series | PLoS ONE |
| spelling | doaj-art-d00119ac43eb49cdbea99dd13ec4d0762025-02-05T05:32:04ZengPublic Library of Science (PLoS)PLoS ONE1932-62032025-01-01201e031242510.1371/journal.pone.0312425Distributed Denial of Services (DDoS) attack detection in SDN using Optimizer-equipped CNN-MLP.Sajid MehmoodRashid AminJamal MustafaMudassar HussainFaisal S AlsubaeiMuhammad D ZakariaSoftware-Defined Networks (SDN) provides more control and network operation over a network infrastructure as an emerging and revolutionary paradigm in networking. Operating the many network applications and preserving the network services and functions, the SDN controller is regarded as the operating system of the SDN-based network architecture. The SDN has several security problems because of its intricate design, even with all its amazing features. Denial-of-service (DoS) attacks continuously impact users and Internet service providers (ISPs). Because of its centralized design, distributed denial of service (DDoS) attacks on SDN are frequent and may have a widespread effect on the network, particularly at the control layer. We propose to implement both MLP (Multilayer Perceptron) and CNN (Convolutional Neural Networks) based on conventional methods to detect the Denial of Services (DDoS) attack. These models have got a complex optimizer installed on them to decrease the false positive or DDoS case detection efficiency. We use the SHAP feature selection technique to improve the detection procedure. By assisting in the identification of which features are most essential to spot the incidents, the approach aids in the process of enhancing precision and flammability. Fine-tuning the hyperparameters with the help of Bayesian optimization to obtain the best model performance is another important thing that we do in our model. Two datasets, InSDN and CICDDoS-2019, are utilized to assess the effectiveness of the proposed method, 99.95% for the true positive (TP) of the CICDDoS-2019 dataset and 99.98% for the InSDN dataset, the results show that the model is highly accurate.https://doi.org/10.1371/journal.pone.0312425 |
| spellingShingle | Sajid Mehmood Rashid Amin Jamal Mustafa Mudassar Hussain Faisal S Alsubaei Muhammad D Zakaria Distributed Denial of Services (DDoS) attack detection in SDN using Optimizer-equipped CNN-MLP. PLoS ONE |
| title | Distributed Denial of Services (DDoS) attack detection in SDN using Optimizer-equipped CNN-MLP. |
| title_full | Distributed Denial of Services (DDoS) attack detection in SDN using Optimizer-equipped CNN-MLP. |
| title_fullStr | Distributed Denial of Services (DDoS) attack detection in SDN using Optimizer-equipped CNN-MLP. |
| title_full_unstemmed | Distributed Denial of Services (DDoS) attack detection in SDN using Optimizer-equipped CNN-MLP. |
| title_short | Distributed Denial of Services (DDoS) attack detection in SDN using Optimizer-equipped CNN-MLP. |
| title_sort | distributed denial of services ddos attack detection in sdn using optimizer equipped cnn mlp |
| url | https://doi.org/10.1371/journal.pone.0312425 |
| work_keys_str_mv | AT sajidmehmood distributeddenialofservicesddosattackdetectioninsdnusingoptimizerequippedcnnmlp AT rashidamin distributeddenialofservicesddosattackdetectioninsdnusingoptimizerequippedcnnmlp AT jamalmustafa distributeddenialofservicesddosattackdetectioninsdnusingoptimizerequippedcnnmlp AT mudassarhussain distributeddenialofservicesddosattackdetectioninsdnusingoptimizerequippedcnnmlp AT faisalsalsubaei distributeddenialofservicesddosattackdetectioninsdnusingoptimizerequippedcnnmlp AT muhammaddzakaria distributeddenialofservicesddosattackdetectioninsdnusingoptimizerequippedcnnmlp |