A novel DDoS detection method using multi-layer stacking in SDN environment

dc.authoridhttps://orcid.org/0000-0001-9767-5685
dc.contributor.authorAlasali, Tasnim
dc.contributor.authorDakkak, Omar
dc.date.accessioned2024-12-27T14:25:46Z
dc.date.available2024-12-27T14:25:46Z
dc.date.issued2024-12-01
dc.departmentFakülteler, Mühendislik Fakültesi, Bilgisayar Mühendisliği Bölümü
dc.description.abstractSoftware Defined Network (SDN) offers virtualized services compatible with infrastructure hosted computing, presenting a flexible, adaptive, and economical network architecture. Switches used in SDN prioritize packet matching in flow tables above packet processing, leaving them open to Denial of Service (DoS) attacks. These attacks, exemplified by Distributed Denial of Service Attacks (DDoS), target a victim while using many infected workstations at once. Due to its scalability and programmability, SDN is being used more and more for network management. However, it has specific security concerns, such as the controller's susceptibility to cyberattacks, which might result in a single point of failure and network-wide risks. This study proposes a novel DDoS prediction model by developing stacking classifier model consisting of multiple base classifiers for an SDN environment. The proposed model is built on stacking several classifiers at the base level and the Meta level, which mixes varied or heterogeneous learners to provide reliable model results. The findings demonstrate that the proposed stacking model outperforms other existing models with respect to accuracy, sensitivity, specificity, precision, and F1 score. Finally, the stacking classifier model is evaluated in terms of binary classification. The evaluation shows the highest AUC of 0.9537 whereas Random Forest, Decision Tree, and Logistic Regression achieve AUC values around 0.93–0.95.
dc.identifier10.1016/j.compeleceng.2024.109769
dc.identifier.doi10.1016/j.compeleceng.2024.109769
dc.identifier.issn0045-7906
dc.identifier.issuePart B
dc.identifier.scopus2-s2.0-85206288479
dc.identifier.scopusqualityQ1
dc.identifier.urihttps://doi.org/10.1016/j.compeleceng.2024.109769
dc.identifier.urihttps://hdl.handle.net/20.500.14619/14932
dc.identifier.volume120
dc.identifier.wosWOS:001338737200001
dc.identifier.wosqualityQ2
dc.indekslendigikaynakScopus
dc.indekslendigikaynakWeb of Science
dc.language.isoen
dc.publisherElsevier
dc.relation.ispartofComputers and Electrical Engineering
dc.relation.ispartofseriesComputers and Electrical Engineering
dc.relation.publicationcategoryMakale - Uluslararası Hakemli Dergi - Kurum Öğretim Elemanı
dc.rightsinfo:eu-repo/semantics/closedAccess
dc.subjectDDoS attacks
dc.subjectMachine learning (ML)
dc.subjectRYU
dc.subjectSoftware-Defined Network (SDN)
dc.subjectStacking classifier
dc.titleA novel DDoS detection method using multi-layer stacking in SDN environment
dc.typeArticle
oaire.citation.volume120

Dosyalar

Lisans paketi
Listeleniyor 1 - 1 / 1
Küçük Resim Yok
İsim:
license.txt
Boyut:
1.17 KB
Biçim:
Item-specific license agreed upon to submission
Açıklama: