A DDoS attack detection method based on SVM and K-nearest neighbour in SDN environment
Zhaohui Ma, Bohong Li · International Journal of Computational Science and Engineering · 2020
This paper presents a detection method for DDoS attack in SDN based on K-nearest neighbour (KNN) algorithm and support vector machine (SVM) algorithm. This method makes use of the characteristics of SDN centralised control, collects flow characteristic information efficiently, classifies the flow, screens out the attack flow, and determines whether the system is attacked or not. Experiments show that the resource consumption rate of this model is only 11% when detecting DDOS attack. Meanwhile, the accuracy rate exceeded 99%.