Abstract
Software Defined Networking (SDN) is widely used in many practical contexts and provides a method for managing networks by separating the data plane from the control plane. However, because of its centralized control logic, SDN is particularly susceptible to Distributed Denial of Service (DDoS) attacks. In numerous studies, methods based on Machine Learning (ML) have been proposed to identify DDoS attacks in the context of SDN. However, the proposed methods are resource intensive and unreliable in a large-scale SDN where a huge amount of traffic data is produced from control and data planes. This may exhaust computational resources, deteriorate the performance of the network, or even result in the shutdown of network systems as a result of resource exhaustion. To deal with the above issues, this paper presents a real-time DDoS detection and mitigation method in a multi-controller SDN environment using cloud computing. We propose to run the Machine Learning development cycle on a secured server in a virtual machine. Then we deploy back the trained model into the SDN controllers. All the exchanges between the virtual machine and the controllers are secured. In this way, we configure these controllers to detect and mitigate DDoS in SDN in real-time. Through useful experiments, we demonstrate that our method is secure, reliable, and efficient.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Singh, S., Prakash, S.: A survey on software defined network based on architecture, issues and challenges. In: 2019 3rd International Conference on Computing Methodologies and Communication (ICCMC), pp. 568–573. IEEE (2019)
Sahoo, K.S.: An evolutionary SVM model for DDoS attack detection in software defined networks. IEEE Access 8, 132502–132513 (2020)
Lin, C.-H., Li, C.-Y., Wang, K.: Setting malicious flow entries against SDN operations: attacks and countermeasures. In: 2018 IEEE Conference on Dependable and Secure Computing (DSC), pp. 1–8. IEEE (2018)
Kalkan, K., Altay, L., Gür, G., Alagöz, F.: JESS: joint entropy-based DDoS defense scheme in SDN. IEEE J. Selected Areas Commun. 36(10), 2358–2372 (2018)
Lubna Fayez Eliyan and Roberto Di Pietro: Dos and DDoS attacks in software defined networks: a survey of existing solutions and research challenges. Future Gener. Comput. Syst. 122, 149–171 (2021)
Virupakshar, K.B., Asundi, M., Channal, K., Shettar, P., Patil, S., Narayan, D.G.: Distributed denial of service (DDoS) attacks detection system for openstack-based private cloud. Procedia Comput. Sci. 167, 2297–2307 (2020)
Chetouane, A., Karoui, K.: A survey of machine learning methods for DDoS threats detection against SDN. In: Jemili, I., Mosbah, M. (eds.) DiCES-N 2022. CCIS, vol. 1564, pp. 99–127. Springer, Cham (2022). https://doi.org/10.1007/978-3-030-99004-6_6
Revathi, M.., Ramalingam, V.. V.., Amutha, B..: A machine learning based detection and mitigation of the DDoS attack by using SDN controller framework. Wireless Pers Commun. 125, 1–25 (2021). https://doi.org/10.1007/s11277-021-09071-1
Khashab, F., Moubarak, J., Feghali, A., Bassil, C.: DDoS attack detection and mitigation in SDN using machine learning. In: 2021 IEEE 7th International Conference on Network Softwarization (NetSoft), pp. 395–401. IEEE (2021)
Omer Elsier Tayfour and Muhammad Nadzir Marsono: Collaborative detection and mitigation of DDoS in software-defined networks. J. Supercomput. 77(11), 13166–13190 (2021)
Rahman, O., Quraishi, M.A.G., Lung, C.-H.: DDoS attacks detection and mitigation in SDN using machine learning. In: 2019 IEEE World Congress on Services (SERVICES), vol. 2642, pp. 184–189. IEEE (2019)
Alzahrani, A.O., Alenazi, M.J.F.: Designing a network intrusion detection system based on machine learning for software defined networks. Future Internet 13(5), 111 (2021)
Karan, B.V., Narayan, D.G., Hiremath, P.S.: Detection of DDoS attacks in software defined networks. In: 2018 3rd International Conference on Computational Systems and Information Technology for Sustainable Solutions (CSITSS), pp. 265–270 (2018)
Aslam, M., et al.: Adaptive machine learning based distributed denial-of-services attacks detection and mitigation system for SDN-enabled IoT. Sensors 22(7), 2697 (2022)
Ahuja, N., Mukhopadhyay, D., Singal, G.: DDoS attack SDN dataset (2020)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2023 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Chetouane, A., Karoui, K., Nemri, G. (2023). Machine Learning Method for DDoS Detection and Mitigation in a Multi-controller SDN Environment Using Cloud Computing. In: Abraham, A., Pllana, S., Casalino, G., Ma, K., Bajaj, A. (eds) Intelligent Systems Design and Applications. ISDA 2022. Lecture Notes in Networks and Systems, vol 715. Springer, Cham. https://doi.org/10.1007/978-3-031-35507-3_54
Download citation
DOI: https://doi.org/10.1007/978-3-031-35507-3_54
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-35506-6
Online ISBN: 978-3-031-35507-3
eBook Packages: Intelligent Technologies and RoboticsIntelligent Technologies and Robotics (R0)