Abstract
Software-defined networking (SDN) is a new networking paradigm developed to reduce network complexity via control and management of the network from a centralized location. Nevertheless, the dynamic nature of SDN can lead to many vulnerabilities and threats, including denial of service (DOS) and Distributed Denial of service (DDoS) attacks. Thus, deploying Intrusion Detection Systems (IDSs) based on machine learning (ML) is a crucial part of the network architecture to monitor malevolent activities. This paper compares three ML models for intelligent intrusion detection in SDN: support vector machines, K-Nearest Neighbors, and Naive Bayes Networks. To evaluate and measure the performance of ML models, we used the DDoS-SDN dataset and compared their evaluation metrics, such as accuracy.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Ahmad, S., Mir, A.H.: Scalability, consistency, reliability and security in SDN controllers: a survey of diverse SDN controllers. J. Netw. Syst. Manage. 29, 1–59 (2021)
Kreutz, D., et al.: Software-defined networking: a comprehensive survey. Proc. IEEE 103(1), 14–76 (2014)
Bannour, F., Souihi, S., Mellouk, A.: Distributed SDN control: survey, taxonomy, and challenges. IEEE Commun. Surv. Tutor. 20(1), 333–354 (2017)
Maleh, Y., Qasmaoui, Y., El Gholami, K., Sadqi, Y., Mounir, S.: A comprehensive survey on SDN security: threats, mitigations, and future directions. J. Reliab. Intell. Environ. 9(2), 201–239 (2023)
Boukraa, L., Mahrach, S., El Makkaoui, K., Esbai, R.: SDN southbound protocols: a comparative study. In: International Conference on Networking, Intelligent Systems and Security, pp. 407–418. Springer International Publishing, Cham (2022)
Depren, O., Topallar, M., Anarim, E., Ciliz, M.K.: An intelligent intrusion detection system (IDS) for anomaly and misuse detection in computer networks. Expert Syst. Appl. 29(4), 713–722 (2005)
Conti, M., Gangwal, A., Gaur, M.S.: A comprehensive and effective mechanism for DDoS detection in SDN. In: 2017 IEEE 13th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob), pp. 1–8. IEEE (2017)
Mahrach, S., Haqiq, A.: DDoS attack and defense in SDN-based cloud. In: Ubiquitous Networking: 7th International Symposium, UNet 2021, Virtual Event, Revised Selected Papers 7, 19–22 May 2021, pp. 149–162. Springer International Publishing (2021)
Mahrach, S., Mjihil, O., Haqiq, A.: Scalable and dynamic network intrusion detection and prevention system. In: Innovations in Bio-Inspired Computing and Applications: Proceedings of the 8th International Conference on Innovations in Bio-Inspired Computing and Applications (IBICA 2017), Marrakech, Morocco, 11–13 Dec 2017, pp. 318–328. Springer International Publishing (2018)
Khraisat, A., Gondal, I., Vamplew, P., Kamruzzaman, J.: Survey of intrusion detection systems: techniques, datasets and challenges. Cybersecurity 2(1), 1–22 (2019)
El Mrabet, M.A., El Makkaoui, K., Faize, A.: Supervised machine learning: a survey. In: 2021 4th International Conference on Advanced Communication Technologies and Networking (CommNet), pp. 1–10. IEEE (2021)
Samad, A., Qadir, M., Nawaz, I., Islam, M.A., Aleem, M.: A comprehensive survey of link prediction techniques for social network. EAI Endorsed Trans. Ind. Netw. Intell. Syst. 7(23), e3 (2020)
Badiy, M., Amounas, F., Bouarafa, S.: An innovative approach for supervised link prediction using feature embedding methods. In: The International Conference on Artificial Intelligence and Smart Environment, pp. 206–211. Springer International Publishing, Cham (2022)
Cervantes, J., Garcia-Lamont, F., RodrÃguez-Mazahua, L., Lopez, A.: A comprehensive survey on support vector machine classification: applications, challenges and trends. Neurocomputing 408, 189–215 (2020)
Latah, M., Toker, L.: An efficient flow-based multi-level hybrid intrusion detection system for software-defined networks. CCF Trans. Netw. 3(3–4), 261–271 (2020)
Tabash, M., Abd Allah, M., Tawfik, B.: Intrusion detection model using naive Bayes and deep learning technique. Int. Arab J. Inf. Technol. 17(2), 215–224 (2020)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2024 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Boukraa, L., Essahraui, S., El Makkaoui, K., Ouahbi, I., Esbai, R. (2024). Intrusion Detection in Software-Defined Networking Using Machine Learning Models. In: Farhaoui, Y., Hussain, A., Saba, T., Taherdoost, H., Verma, A. (eds) Artificial Intelligence, Data Science and Applications. ICAISE 2023. Lecture Notes in Networks and Systems, vol 838. Springer, Cham. https://doi.org/10.1007/978-3-031-48573-2_8
Download citation
DOI: https://doi.org/10.1007/978-3-031-48573-2_8
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-48572-5
Online ISBN: 978-3-031-48573-2
eBook Packages: Intelligent Technologies and RoboticsIntelligent Technologies and Robotics (R0)