Enhanced DDoS Detection in Software Defined Networking Using Ensemble-Based Machine Learning
Ms. Bithi, M. A. Hossain, Md Kawsar Ahmed, Rabeya Sultana, Ishtiaq Ahammad, Md Shihabul Islam · 2024
The burgeoning adoption of Software Defined Networking (SDN) has revolutionized network management, yet it introduces unprecedented challenges, notably the susceptibility to Distributed Denial-of-Service (DDoS) attacks. Recognizing this imperative, our research delves into fortifying SDN security, proposing a novel approach that marries machine learning prowess with the intricacies of SDN architecture. This study endeavors to bolster DDoS detection within SDN environments, strategically leveraging an ensemble-based Random Forest (RF) algorithm and Recursive Feature Elimination. The overarching goal is to enhance the efficacy of SDN security measures, providing a dynamic defense against evolving DDoS threats. An implementation process unfolds through comprehensive data preprocessing, featuring the strategic selection of key features via Recursive Feature Elimination. Central to our approach is the application of an ensemble-based Random Forest algorithm, which has been rigorously trained using a dedicated dataset tailored for Software Defined Networking. A comprehensive assessment follows, where critical performance indicators such as Recall, Accuracy, Precision, F-1 Score, and Area Under the Curve (AUC) substantiate the reliability of our method. The outcome is a paradigm shift in DDoS detection within SDN. Our ensemble-based RF algorithm not only exhibits commendable accuracy but also outperforms traditional methods across key metrics. The strategic feature selection contributes not only to heightened efficiency but also bolsters the overall resilience of SDN networks against DDoS incursions. Beyond the confines of conventional methodologies, this model, attaining almost 100% accuracy, heralds a milestone in SDN security.