Voting‐based intrusion detection framework for securing software‐defined networks. (20th July 2020)

• Record Type: Journal Article
• Authors: Swami, Rochak; Dave, Mayank; Ranga, Virender
• Is Part Of: Concurrency and computation. Volume 32:Number 24(2020)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2020-07-20
• Subjects: DDoS -- IDS -- software‐defined networking -- voting; Parallel processing (Electronic computers) -- Periodicals; Parallel computers -- Periodicals; 004.35
• DOI: 10.1002/cpe.5927
• Languages: English
• ISSNs: 1532-0626

Abstract

Summary: Software‐defined networking (SDN) is an emerging paradigm in enterprise networks because of its flexible and cost‐effective nature. By decoupling control and data plane, SDN can provide various defense solutions for securing futuristic networks. However, the architectural design and characteristics of SDN attract several severe attacks. Distributed denial of service (DDoS) is considered as a major destructive cyber attack that makes the services of controller unavailable for its legitimate users. In this research article, an intrusion detection framework is proposed to detect DDoS attacks against SDN. The proposed framework relies on voting‐based ensemble model for the attack detection. Ensemble model is a combination of multiple machine learning classifiers for prediction of final results. In this research article, we propose and analyze three ensemble models named as Voting‐CMN, Voting‐RKM, and Voting‐CKM particularly to benchmarking datasets such as UNSW‐NB15, CICIDS2017, and NSL‐KDD, respectively. For validation of the proposed models, a cross‐validation technique is used with the prediction algorithms. The effectiveness of proposed models is evaluated in terms of prominent metrics (accuracy, precision, recall, and F‐measure). Experimental results indicate that the proposed models achieve better performance in terms of accuracy as compared with other existing models.