Leveraging datasets for effective mitigation of DDoS attacks in software-defined networking: significance and challenges
Abstract
Software-Defined Networking (SDN) has emerged as a transformative paradigm for network management, offering centralized control and programmability. However, with the proliferation of Distributed Denial of Service (DDoS) attacks that pose significant threats to network infrastructures, effective mitigation strategies are needed. The subject matter of this study is to explore the importance of datasets in the mitigation of DDoS attacks in SDN environments. The paper discusses the significance of datasets for training machine learning models, evaluating detection mechanisms, and enhancing the resilience of SDN-based defense systems. Goal of the paper is to assist researchers in effectively selecting and usage of datasets for DDoS mitigation in SDN, thereby maximizing benefits and overcoming challenges involved in dataset selection. This paper outlines the challenges associated with dataset collection, labeling, and management, along with potential solutions to address these challenges. Effective detection and mitigation of DDoS attacks in SDN require robust datasets that capture the diverse and evolving nature of attack scenarios. Characterization of tasks for each section is as follows: Importance of datasets in DDoS attack mitigation in SDN, challenges in dataset utilization in DDoS mitigation in SDN, Guidelines for dataset selection, comparison of datasets used and their results and different dataset usage according to the need. Methodology involves collecting results in tabular form based on prior research to analyze the characteristics of existing datasets, techniques for dataset augmentation and enhancement, and evaluating the effectiveness of different datasets in detecting and mitigating DDoS attacks through comprehensive experimentation. Results of our findings indicate that effective detection and mitigation of DDoS attacks in SDN require robust datasets that capture the diverse and evolving nature of attack scenarios. Our findings provide valuable insights into the importance of datasets in enhancing the resilience of SDN infrastructures against DDoS attacks. In conclusion, our findings provide valuable insights into the importance of datasets in enhancing the resilience of SDN infrastructures against DDoS attacks and highlight the need for further research in this critical area. Thorough guidelines for dataset selection and impacts of different datasets used in recent studies, provide research challenges and future directions in this area.
Keywords
Full Text:
PDFReferences
Mirkovic, J., & Reiher, P. A taxonomy of DDoS attack and DDoS defense mechanisms. ACM SIGCOMM Comput. Commun. Rev., 2004, vol. 34, iss. 2, pp. 39–53. DOI: 10.1145/997150.997156.
Bülbül, N. S., & Fischer, M. SDN/NFV-based DDoS Mitigation via Pushback. ICC 2020 - 2020 IEEE International Conference on Communications (ICC), Dublin, Ireland, 2020, pp. 1-6. DOI: 10.1109/ICC40277.2020.9148717.
Meidan, Y., Bohadana, M., Mathov, Y., Mirsky, Y., Shabtai, A., Breitenbacher, D., & Elovici, Y. N-BaIoT—Network-Based Detection of IoT Botnet Attacks Using Deep Autoencoders. IEEE Pervasive Computing, 2018, vol. 17, iss. 3, pp. 12–22. DOI: 10.1109/mprv.2018.03367731.
Tavallaee, M., Bagheri, E., Lu, W., & Ghorbani, A. A. A detailed analysis of the KDD CUP 99 data set. 2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications, Ottawa, ON, Canada, 2009, pp. 1-6. DOI: 10.1109/cisda.2009.5356528.
Lippmann, R. P., Fried, D. R., Graf, I., Haines, J. W., Kendall, K. R., McClung, D., Weber, D., Webster, S. E., Wyschogrod, D., Cunningham, R. K., & Zissman, M. A. Evaluating intrusion detection systems: the 1998 DARPA off-line intrusion detection evaluation, DARPA Information Survivability Conference and Exposition. DISCEX'00, Hilton Head, SC, USA, 2000, vol. 2, pp. 12-26. DOI: 10.1109/DISCEX.2000.821506.
Sharafaldin, I., Lashkari, H. A., & Ghorbani, A. A. Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization. Proceedings of the 4th International Conference on Information Systems Security and Privacy ICISSP, 2018, vol. 1, pp. 108-116. DOI: 10.5220/0006639801080116.
Su, Y., Xiong, D., Qian, K., & Wang, Y. A Comprehensive Survey of Distributed Denial of Service Detection and Mitigation Technologies in Software-Defined Network. Electronics, 2024, vol. 13, no. 4, article no. 807. DOI: 10.3390/electronics13040807.
Meidan, Y., Bohadana, M., Shabtai, A., Ochoa, M., Tippenhauer, N. O., Guarnizo, J. D., & Elovici, Y. Detection of Unauthorized IoT Devices Using Machine Learning Techniques. arXiv:1709.04647, 2017. DOI: 10.48550/arXiv.1709.04647.
Sumadi, F. D. S., & Aditya, C. S. K. Comparative Analysis of DDoS Detection Techniques Based on Machine Learning in OpenFlow Network. 2020 3rd International Seminar on Research of Information Technology and Intelligent Systems (ISRITI), Yogyakarta, Indonesia, 2020, pp. 152-157. DOI: 10.1109/ISRITI51436.2020.9315510.
Najafimehr, M., Zarifzadeh, S., & Mostafavi, S. DDoS attacks and machine-learning-based detection methods: A survey and taxonomy. Engineering Reports, 2023, vol. 5, iss. 12, aricle no. e12697. DOI: 10.1002/eng2.12697.
Hnamte, V., Najar, A. A., Nhung-Nguyen, H., Hussain, J., & Sugali, M. N. DDoS attack detection and mitigation using deep neural network in SDN environment. Computers & Security, 2024, vol. 138, article no. 103661. DOI: 10.1016/j.cose.2023.103661.
Ko, K.-M., Baek, J.-M., Seo, B.-S., & Lee, W.-B. Comparative Study of AI-Enabled DDoS Detection Technologies in SDN. Applied Sciences, 2023, vol. 13, iss. 17, article no. 9488. DOI: 10.3390/app13179488.
Dehkordi, A. B., Soltanaghaei, M., & Boroujeni, F. Z. The DDoS attacks detection through machine learning and statistical methods in SDN. J Supercomput, 2021, vol. 77, pp. 2383-2415. DOI: 10.1007/s11227-020-03323-w.
Li, C., Wu, Y., Yuan, X., Sun, Z., Wang, W., Li, X., & Gong, L. Detection and defense of DDoS attack-based on deep learning in OpenFlow-based SDN. International Journal of Communication Systems, 2018, vol. 31, no. 5, article no. e3497. DOI: 10.1002/dac.3497.
Wang, H., & Li, W. DDosTC: A Transformer-Based Network Attack Detection Hybrid Mechanism in SDN. Sensors, 2021, vol. 21, iss. 15, article no. 5047. DOI: 10.3390/s21155047.
Jameel, A. S. M. M., Mohamed, A. P., Zhang, X., & Gamal, A. E. Deep Learning for Frame Error Prediction Using a DARPA Spectrum Collaboration Challenge (SC2) Dataset. IEEE Networking Letters, 2021, vol. 3, iss. 3, pp. 133-137. DOI: 10.1109/LNET.2021.3096813.
Nejad, S. H. M., & Majma, M. R. A Novel Congestion Avoidance Algorithm Using Two Routing Algorithms and Fast-Failover Group Table in SDN Networks, In: Ghita, B., & Shiaeles, S. (eds) Selected Papers from the 12th International Networking Conference. INC 2020. Lecture Notes in Networks and Systems, Springer, Cham, 2021, vol. 180, pp. 146-158. DOI: 10.1007/978-3-030-64758-2_11.
Almiani, M., AbuGhazleh, A., Jararweh, Y., & Razaque, A. DDoS detection in 5G-enabled IoT networks using deep Kalman backpropagation neural network. Int. J. Mach. Learn. & Cyber., 2021, vol. 12, pp. 3337-3349. DOI: 10.1007/s13042-021-01323-7.
Al-Turaiki I, & Altwaijry N. A Convolutional Neural Network for Improved Anomaly-Based Network Intrusion Detection. Big Data, 2021, vol. 9, iss. 3, pp. 233-252. DOI: 10.1089/big.2020.0263.
Zolfaghari, H., Rossi, D., Cerroni, W., Okuhara, H., Raffaelli, C., & Nurmi, J. Flexible Software-Defined Packet Processing Using Low-Area Hardware. IEEE Access, 2020, vol. 8, pp. 98929-98945. DOI: 10.1109/access.2020.2996660.
Yungaicela-Naula, N. M., Vargas-Rosales, C., & Pérez-Díaz, J. A. SDN/NFV-based framework for autonomous defense against slow-rate DDoS attacks by using reinforcement learning. Future Generation Computer Systems, 2023, vol. 149, pp. 637-649. DOI: 10.1016/j.future.2023.08.007.
Najar, A. A., & Naik, S. M. Cyber-Secure SDN: A CNN-Based Approach for Efficient Detection and Mitigation of DDoS attacks. Computers & Security, 2024, vol. 139, article no. 103716. DOI: 10.1016/j.cose.2024.103716.
Alanazi, F., Jambi, K., Eassa, F., Khemakhem, M., Basuhail, A., & Alsubhi, K. Ensemble Deep Learning Models for Mitigating DDoS Attack in Software-Defined Network. Intelligent Automation and Soft Computing, 2022, vol. 32, no. 2, pp. 923-938. DOI: 10.32604/iasc.2022.024668.
Aslam, N., Srivastava, S. & Gore, M.M. A Comprehensive Analysis of Machine Learning- and Deep Learning-Based Solutions for DDoS Attack Detection in SDN. Arab J Sci Eng, 2024, vol. 49, pp. 3533-3573 DOI: 10.1007/s13369-023-08075-2.
DOI: https://doi.org/10.32620/reks.2024.2.11
Refbacks
- There are currently no refbacks.
