Skip to main content

Intrusion Detection in Software-Defined Networking Using Machine Learning Models

  • Conference paper
  • First Online:
Artificial Intelligence, Data Science and Applications (ICAISE 2023)

Part of the book series: Lecture Notes in Networks and Systems ((LNNS,volume 838))

  • 198 Accesses

Abstract

Software-defined networking (SDN) is a new networking paradigm developed to reduce network complexity via control and management of the network from a centralized location. Nevertheless, the dynamic nature of SDN can lead to many vulnerabilities and threats, including denial of service (DOS) and Distributed Denial of service (DDoS) attacks. Thus, deploying Intrusion Detection Systems (IDSs) based on machine learning (ML) is a crucial part of the network architecture to monitor malevolent activities. This paper compares three ML models for intelligent intrusion detection in SDN: support vector machines, K-Nearest Neighbors, and Naive Bayes Networks. To evaluate and measure the performance of ML models, we used the DDoS-SDN dataset and compared their evaluation metrics, such as accuracy.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 149.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 199.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Ahmad, S., Mir, A.H.: Scalability, consistency, reliability and security in SDN controllers: a survey of diverse SDN controllers. J. Netw. Syst. Manage. 29, 1–59 (2021)

    Article  Google Scholar 

  2. Kreutz, D., et al.: Software-defined networking: a comprehensive survey. Proc. IEEE 103(1), 14–76 (2014)

    Article  Google Scholar 

  3. Bannour, F., Souihi, S., Mellouk, A.: Distributed SDN control: survey, taxonomy, and challenges. IEEE Commun. Surv. Tutor. 20(1), 333–354 (2017)

    Article  Google Scholar 

  4. Maleh, Y., Qasmaoui, Y., El Gholami, K., Sadqi, Y., Mounir, S.: A comprehensive survey on SDN security: threats, mitigations, and future directions. J. Reliab. Intell. Environ. 9(2), 201–239 (2023)

    Article  Google Scholar 

  5. Boukraa, L., Mahrach, S., El Makkaoui, K., Esbai, R.: SDN southbound protocols: a comparative study. In: International Conference on Networking, Intelligent Systems and Security, pp. 407–418. Springer International Publishing, Cham (2022)

    Google Scholar 

  6. Depren, O., Topallar, M., Anarim, E., Ciliz, M.K.: An intelligent intrusion detection system (IDS) for anomaly and misuse detection in computer networks. Expert Syst. Appl. 29(4), 713–722 (2005)

    Article  Google Scholar 

  7. Conti, M., Gangwal, A., Gaur, M.S.: A comprehensive and effective mechanism for DDoS detection in SDN. In: 2017 IEEE 13th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob), pp. 1–8. IEEE (2017)

    Google Scholar 

  8. Mahrach, S., Haqiq, A.: DDoS attack and defense in SDN-based cloud. In: Ubiquitous Networking: 7th International Symposium, UNet 2021, Virtual Event, Revised Selected Papers 7, 19–22 May 2021, pp. 149–162. Springer International Publishing (2021)

    Google Scholar 

  9. Mahrach, S., Mjihil, O., Haqiq, A.: Scalable and dynamic network intrusion detection and prevention system. In: Innovations in Bio-Inspired Computing and Applications: Proceedings of the 8th International Conference on Innovations in Bio-Inspired Computing and Applications (IBICA 2017), Marrakech, Morocco, 11–13 Dec 2017, pp. 318–328. Springer International Publishing (2018)

    Google Scholar 

  10. Khraisat, A., Gondal, I., Vamplew, P., Kamruzzaman, J.: Survey of intrusion detection systems: techniques, datasets and challenges. Cybersecurity 2(1), 1–22 (2019)

    Article  Google Scholar 

  11. El Mrabet, M.A., El Makkaoui, K., Faize, A.: Supervised machine learning: a survey. In: 2021 4th International Conference on Advanced Communication Technologies and Networking (CommNet), pp. 1–10. IEEE (2021)

    Google Scholar 

  12. Samad, A., Qadir, M., Nawaz, I., Islam, M.A., Aleem, M.: A comprehensive survey of link prediction techniques for social network. EAI Endorsed Trans. Ind. Netw. Intell. Syst. 7(23), e3 (2020)

    Google Scholar 

  13. Badiy, M., Amounas, F., Bouarafa, S.: An innovative approach for supervised link prediction using feature embedding methods. In: The International Conference on Artificial Intelligence and Smart Environment, pp. 206–211. Springer International Publishing, Cham (2022)

    Google Scholar 

  14. Cervantes, J., Garcia-Lamont, F., Rodríguez-Mazahua, L., Lopez, A.: A comprehensive survey on support vector machine classification: applications, challenges and trends. Neurocomputing 408, 189–215 (2020)

    Google Scholar 

  15. Latah, M., Toker, L.: An efficient flow-based multi-level hybrid intrusion detection system for software-defined networks. CCF Trans. Netw. 3(3–4), 261–271 (2020)

    Article  Google Scholar 

  16. Tabash, M., Abd Allah, M., Tawfik, B.: Intrusion detection model using naive Bayes and deep learning technique. Int. Arab J. Inf. Technol. 17(2), 215–224 (2020)

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Lamiae Boukraa .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2024 The Author(s), under exclusive license to Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Boukraa, L., Essahraui, S., El Makkaoui, K., Ouahbi, I., Esbai, R. (2024). Intrusion Detection in Software-Defined Networking Using Machine Learning Models. In: Farhaoui, Y., Hussain, A., Saba, T., Taherdoost, H., Verma, A. (eds) Artificial Intelligence, Data Science and Applications. ICAISE 2023. Lecture Notes in Networks and Systems, vol 838. Springer, Cham. https://doi.org/10.1007/978-3-031-48573-2_8

Download citation

Publish with us

Policies and ethics