Machine learning based intrusion detection system for software defined networks

ABUBAKAR, Atiku and PRANGGONO, Bernardi (2017). Machine learning based intrusion detection system for software defined networks. In: Proceedings of the 2017 Eighth International Conference on Emerging Security Technologies (EST). IEEE. (In Press)

[img]
Preview
PDF
Pranggono-MachineLearningBasedIntrusionDetectionSystem(AM).pdf - Accepted Version
Available under License All rights reserved.

Download (1MB) | Preview

Abstract

Software-Defined Networks (SDN) is an emerging area that promises to change the way we design, build, and operate network architecture. It tends to shift from traditional network architecture of proprietary based to open and programmable network architecture. However, this new innovative and improved technology also brings another security burden into the network architecture, with existing and emerging security threats. The network vulnerability has become more open to intruders: the focus is now shifted to a single point of failure where the central controller is a prime target. Therefore, integration of intrusion detection system (IDS) into the SDN architecture is essential to provide a network with attack countermeasure. The work designed and developed a virtual testbed that simulates the processes of the real network environment, where a star topology is created with hosts and servers connected to the OpenFlow OVS-switch. Signature-based Snort IDS is deployed for traffic monitoring and attack detection, by mirroring the traffic destine to the servers. The vulnerability assessment shows possible attacks threat exist in the network architecture and effectively contain by Snort IDS except for the few which the suggestion is made for possible mitigation. In order to provide scalable threat detection in the architecture, a flow-based IDS model is developed. A flow-based anomaly detection is implemented with machine learning to overcome the limitation of signature-based IDS. The results show positive improvement for detection of almost all the possible attacks in SDN environment with our pattern recognition of neural network for machine learning using our trained model with over 97% accuracy.

Item Type: Book Section
Research Institute, Centre or Group: Cultural Communication and Computing Research Institute > Communication and Computing Research Centre
Depositing User: Helen Garner
Date Deposited: 16 Aug 2017 15:24
Last Modified: 01 Sep 2017 04:18
URI: http://shura.shu.ac.uk/id/eprint/16558

Actions (login required)

View Item View Item

Downloads

Downloads per month over past year

View more statistics