Abstract
Advancements of Internet of Things (IoT) enhance the application spectrum of smart networking and demand intelligent security measurements against cyber-attacks. Recent integration of Software Defined Networking (SDN) in IoT environments provides better network management by decoupling of control plane from forwarding plane. An advanced SDN based network management also utilize the machine learning models to classify IoT network traffic at OpenFlow Switches with the coordination of SDN controller. In this paper, we propose a novel SDN-enabled Distributed Denial-of-Services attacks Detection and Mitigation System (SDN-DMS) which utilize SDN enabled security mechanism for IoT devices with support of machine learning algorithms to develop Distributed Denial of Services (DDoS) detection and mitigation system. SDN-DMS integrates Floodlight and Pox SDN controllers to reconfigure the OpenFlow switches in order to mitigate the detected DDoS attacks by advanced Support Vector Machine (SVM) algorithms of Lagrangian Support Vector Machine (LSVM), Finite Newton Lagrangian Support Vector Machine (NLSVM), Smooth Support Vector Machine (SSVM) and Finite Newton Support Vector Machine (NSVM). SDN-DMS measures the network behaviour of IoT devices by collecting the network traffic and classifying the traffic as normal and DDoS attacks by using an environment-specific dataset.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Wu, H., Wang, W.: A game theory based collaborative security detection method for Internet of Things systems. IEEE Trans. Inf. Forensics Secur. 13(6), 1432–1445 (2018)
da Costa, K.A., Papa, J.P., Lisboa, C.O., Munoz, R., de Albuquerque, V.H.C.: Internet of Things: a survey on machine learning-based intrusion detection approaches. Comput. Netw. 151, 147–157 (2019)
Rathore, S., Kwon, B.W., Park, J.H.: BlockSecIoTNet: blockchain-based decentralized security architecture for IoT network. J. Netw. Comput. Appl. 143, 167–177 (2019)
Lyu, M., Sherratt, D., Sivanathan, A., Gharakheili, H.H., Radford, A., Sivaraman, V.: Quantifying the reflective DDoS attack capability of household IoT devices. In: Proceedings of the 10th ACM Conference on Security and Privacy in Wireless and Mobile Networks, pp. 46–51. ACM, July 2017
Bhunia, S.S., Gurusamy, M.: Dynamic attack detection and mitigation in IoT using SDN. In 2017 27th International Telecommunication Networks and Applications Conference (ITNAC), pp. 1–6. IEEE, November 2017
Braga, R., de Souza Mota, E., Passito, A.: Lightweight DDoS flooding attack detection using NOX/OpenFlow. In LCN, vol. 10, pp. 408–415, October 2010
AlEroud, A., Alsmadi, I.: Identifying cyber-attacks on software defined networks: an inference-based intrusion detection approach. J. Netw. Comput. Appl. 80, 152–164 (2017)
McKeown, N., et al.: Openow: enabling innovation in campus networks. SIGCOMM Comput. Commun. (2016)
Rawat, D.B., Reddy, S.R.: Software defined networking architecture, security and energy efficiency: a survey. IEEE Commun. Surv. Tutorials 19(1), 325–346 (2016)
Xu, Y., Liu, Y.: DDoS attack detection under SDN context. In: IEEE INFOCOM 2016-The 35th Annual IEEE International Conference on Computer Communications, pp. 1–9. IEEE, April 2016
da Rocha Fonseca, P.C., Mota, E.S.: A survey on fault management in software-defined networks. IEEE Commun. Surv. Tutorials 19(4), 2284–2321 (2017)
Choi, Y.: Implementation of content-oriented networking architecture (CONA): a focus on DDoS countermeasure. In: Proceedings of European NetFPGA developers workshop, September 2010
Yan, Q., Yu, F.R., Gong, Q., Li, J.: Software-defined networking (SDN) and distributed denial of service (DDoS) attacks in cloud computing environments: a survey, some research issues, and challenges. IEEE Commun. Surv. Tutorials 18(1), 602–622 (2015)
Cui, L., Yu, F.R., Yan, Q.: When big data meets software-defined networking: SDN for big data and big data for SDN. IEEE Network 30(1), 58–65 (2016)
Lu, S.X., Wang, X.Z.: A comparison among four SVM classification methods: LSVM, NLSVM, SSVM and NSVM. In: Proceedings of 2004 International Conference on Machine Learning and Cybernetics (IEEE Cat. No. 04EX826), vol. 7, pp. 4277–4282, August 2004
Acknowledgement
This work was partially supported by the National Key Research Development Program of China (2019QY(Y)0206, 2016QY01W0200), the National Natural Science Foundation of China NSFC (U1736211)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2020 Springer Nature Switzerland AG
About this paper
Cite this paper
Aslam, M., Ye, D., Hanif, M., Asad, M. (2020). Machine Learning Based SDN-enabled Distributed Denial-of-Services Attacks Detection and Mitigation System for Internet of Things. In: Chen, X., Yan, H., Yan, Q., Zhang, X. (eds) Machine Learning for Cyber Security. ML4CS 2020. Lecture Notes in Computer Science(), vol 12486. Springer, Cham. https://doi.org/10.1007/978-3-030-62223-7_16
Download citation
DOI: https://doi.org/10.1007/978-3-030-62223-7_16
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-62222-0
Online ISBN: 978-3-030-62223-7
eBook Packages: Computer ScienceComputer Science (R0)