Machine learning based intrusion detection system for software defined networks

ABUBAKAR, Atiku and PRANGGONO, Bernardi (2017). Machine learning based intrusion detection system for software defined networks. In: 2017 7th International Conference on Emerging Security Technologies, EST 2017, Canterbury, 6-8 September. IEEE.

Preview

PDF Pranggono-MachineLearningBasedIntrusionDetectionSystem(AM).pdf - Accepted Version All rights reserved. Download (1MB) | Preview

Abstract

Software-Defined Networks (SDN) is an emerging area that promises to change the way we design, build, and operate network architecture. It tends to shift from traditional network architecture of proprietary based to open and programmable network architecture. However, this new innovative and improved technology also brings another security burden into the network architecture, with existing and emerging security threats. The network vulnerability has become more open to intruders: the focus is now shifted to a single point of failure where the central controller is a prime target. Therefore, integration of intrusion detection system (IDS) into the SDN architecture is essential to provide a network with attack countermeasure. The work designed and developed a virtual testbed that simulates the processes of the real network environment, where a star topology is created with hosts and servers connected to the OpenFlow OVS-switch. Signature-based Snort IDS is deployed for traffic monitoring and attack detection, by mirroring the traffic destine to the servers. The vulnerability assessment shows possible attacks threat exist in the network architecture and effectively contain by Snort IDS except for the few which the suggestion is made for possible mitigation. In order to provide scalable threat detection in the architecture, a flow-based IDS model is developed. A flow-based anomaly detection is implemented with machine learning to overcome the limitation of signature-based IDS. The results show positive improvement for detection of almost all the possible attacks in SDN environment with our pattern recognition of neural network for machine learning using our trained model with over 97% accuracy.

Item Type:	Conference or Workshop Item (Paper)
Research Institute, Centre or Group - Does NOT include content added after October 2018:	Cultural Communication and Computing Research Institute > Communication and Computing Research Centre
Identification Number:	https://doi.org/10.1109/EST.2017.8090413
Depositing User:	Helen Garner
Date Deposited:	16 Aug 2017 15:24
Last Modified:	18 Mar 2021 03:04
URI:	https://shura.shu.ac.uk/id/eprint/16558

Actions (login required)

View Item

Downloads

Publication Metrics