Handling intrusion and DDoS attacks in Software Defined Networks using machine learning techniques

National Software Engineering Conference, NSEC 2014

Volumn , Issue , 2014, Pages 55-60

  Ashraf, Javed ^a   Latif, Seemab ^a  

^a NATIONAL UNIVERSITY OF SCIENCES AND TECHNOLOGY   (Pakistan)

Author keywords

Distributed Denial of Service Attack; Intrusion Detection; Machine Learning; Software Defined Networking (SDN)

Indexed keywords

INTRUSION DETECTION; LEARNING SYSTEMS; MACHINE LEARNING; NETWORK SECURITY; SOFTWARE DEFINED NETWORKING; SOFTWARE ENGINEERING;

CONTROL LOGIC; DDOS ATTACK; DISTRIBUTED DENIAL OF SERVICE ATTACK; MACHINE LEARNING TECHNIQUES; NETWORK CONTROL; SECURITY THREATS; SOFTWARE DEFINED NETWORKING (SDN); VERTICAL INTEGRATION;

DENIAL-OF-SERVICE ATTACK;

EID: 84921652362     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NSEC.2014.6998241     Document Type: Conference Paper

References (35)

1. N. Mckeown, "How SDN will Shape Networking," October 2011. [Online]. http://www.youtube.comiwatch?v=c9-K50q-gA
2. S. Schenker, "The Future of Networking, and the Past of Protocols,"October 2011. [Online]. http://www.youtube.com/watch?v=YHeyuD89nlY
3. H. Kim and N. Feamster, "Improving network management with software defined networking," Communications Magazine, IEEE, vol. 51, no. 2, pp. 114-119, 2013.
4. P. Porras, S. Shin, V. Yegneswaran, M. Fong, M. Tyson, and G. Gu, "A security enforcement kernel for OpenFlow networks," in Proceedings of the First Workshop on Hot Topics in Software Defined Networks, ser. HotSDN '12. New York, NY, USA: ACM, 2012, pp. 121-126. [Online]. http://doi.acm.orgl10.1145/2342441.2342466
5. S. Shin, P. Porras, V. Yegneswaran, M. Fong, G. Gu, and M. Tyson, "FRESCO: Modular composable security services for software-defined networks," in Internet Society NDSS., Feb. 2013.
6. D. Kreutz, F. M. Ramos, and P. Verissimo, 'Towards secure and dependable software-defined networks," in Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking, ser. HotSDN'13. New York, NY, USA: ACM, 2013, pp. 55-60.
7. Diego Kreutz, Member, Fernando M. V. Ramos, Paulo Verissimo, Fellow, Christian Esteve Rothenberg, Siamak Azodolmolky, and Steve Uhlig, "Software-Defined Networking: A Comprehensive Survey". [Online]: http://arxiv.orglabsl1406.0440
8. S. Sorensen, "Security implications of software-defined networks,"2012. [Online]. Available: http://www.fiercetelecom.com/storylsecurityimplications-software-defined-networks/20 12-05-14
9. S. M. Kerner, "Is SDN Secure?" Mar 2013. [Online]. Available: http://www.enterprisenetworkingplanet.com/netsecur/is-sdn-ecure.html
10. R. Kloti, "Openflow: A security analysis," Master's thesis, Swiss Federal Institute of Technology Zurich (ETH), Zurich, Swiss, 2013.
11. M. Wasserman and S. Hartman, "Security analysis of the open networking foundation (ont) OpenFlow switch specification," Internet Engineering Task Force, Apr 2013. [Online]. Available: https://datatracker.ietf.orgidoc/draft-mrw-sdnsec-openflow-analysis/
12. S. Shin and G. Gu, "Attacking software-defined networks: A first feasibility study," in Proceedings of the second workshop on Hot topics in software defined networks, ser. HotSDN'13. New York, NY, USA: ACM, 2013, pp. 1-2.
13. K. Benton, L. J. Camp, and C. Small, "OpenFlow vulnerability assessment," in Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking, ser. HotSDN '13. New York, NY, USA: ACM, 2013, pp. 151-152.
14. M. Masikos, O. Zouraraki C. Patrikakis. (2004, December) CISCO. [Online]. http://www.cisco.comlweb/aboutlac123/ac147/archived-issues/ipj-7-4/dos-attacks.html
15. A Mitrocotsa C. Douligeris, "DDoS Attack and Defence Mechanism: A Classification," in Singnal processing and information tecnology in 3rd IEEE International Symposium, Apr 2003, pp. 190-193.
16. Prolexic. (2013, December) DoS and DDoS attack reports, trends and statistics. [Online]. http://www.prolexic.com/knowledge-center-dos-andddos-attackreports.html
17. Google, Arbor. (2013, Oct) Digital Attack Map. [Online]. http://www.digitalattackmap.coml#anim=I&color=O&country=ALL&time16003&view=map
18. Seyed Mohammad Mousavi, Early Detection of DDoS Attacks in Software Defined Networks Controller [Online]. http://www.csit.carleton.cal-msthilairelThesis/Seyed%20Mousavi.pdf
19. Sharmila Kishor Wagh, Vinod K Pachghare and Satish R Kolhe. Article: Survey on Intrusion Detection System using Machine Learning Techniques. International Journal of Computer Applications 78(16):30-37, September 2013. Published by Foundation of Computer Science, New York, USA
20. Jayveer Singh, Manisha J. Nene, A Survey on Machine Learning Techniques for Intrusion Detection Systems. [Online]. http://www.ijarcce.com/upload/2013/november/35-o-jayveer-singhA-Survey-on-Machine.pdf
21. Hua TANG, Zhuolin CAO "Machine Learning-based Intrusion Detection Algorithms" Binary Information Press, December, 2009
22. D. Rumelhart, G. Hinton and R Williams, "Learning internal representations by back-propagating errors," Parallel Distributed Processing: Explorations in the Microstructure of Cognition, D. Rumelhart and I. McClelland editors, vol. 1, pp. 3 18-362, MIT Press, 1986.
23. Dewan Md. Farid, Mohammad Zahidur Rahman "Learning Intrusion Detection Based on Adaptive Bayesian Algorithm" 1-4244-2136-7/2008
24. Jonatan Gomez and Dipankar Dasgupta "Evolving Fuzzy Classifiers for Intrusion Detection" Workshop on Information Assurance United States Military Academy, West Point, NY June 2001
25. AA Ojugo, AO. Eboka, O.E. Okonta, R.E Yoro, F.O. Aghware "Genetic Algorithm Rule-Based Intrusion Detection System" (GAIDS), ISSN 2079-8407 VOL. 3, NO. 8 Aug, 2012
26. J. L. Zhao, J. F. Zhao, and J. J. Li, - Intrusion Detection Based on Clustering Genetic Algorithml, International Conference on Machine Learning and Cybernetics IEEE, Guangzhou, 2005, pp. 3911-3914.
27. W. Spears, and V. Anand, -A Study of Crossover Operators in Genetic Programming", In Proceedings of the Sixth International Symposium on Methodologies for Intelligent Systems, Charlotte, NC. 1991, pp. 409-418.
28. M. S. A Khan, "Rule based Network Intrusion Detection using Genetic Algorithm," International J. Computer Applications, vol. 18, no. 8, pp. 26-29, March 2011.
29. Rajdeep Borgohain, " FuGelDS : Fuzzy Genetic paradigms in Intrusion Detection Systems," International Journal of Advanced Networking and Applications, vol. 3, no. 6, pp. 1409-1415, 2012
30. P Garcia Teodora, J Diaz Verdejo, G Macia Farnandez, and E Vazquez, "Anomaly-based network intrusion detection: Techniques, Systems and Challenges," Journal of Computers & Security, vol. 28, no. 1, pp. 18-28, February 2009.
31. Hua TANG†", Zhuolin CAO "Machine Learning-based Intrusion Detection Algorithms "Journal of Computational Information Systems5:6(2009) 1825-1831.
32. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner, "Openjlow: enabling innovation in Campus networks, " SIGCOMM Comput. Commun. Rev., vol. 38, no. 2, pp. 69-74, Mar. 2008.
33. ONF, "Open networking foundation" 2014. [Online]. Available: https://www.opennetworking.orgi
34. T. Mitchell, "Decision Tree Learning", in T. Mitchell, Machine Learning, The McGraw-Hili Companies, Inc., 1997, pp. 52-78.
35. Sandhya Peddabachigari, Ajith Abraham, Johnson Thomas, "Intrusion Detection Systems Using Decision Trees and Support Vector Machines". international Journal of Applied Science And Computation, 2004.