Cited by 72Network Security and Intrusion DetectionSoftware-Defined Networks and 5GNetwork Packet Processing and Optimization

Machine-Learning Techniques for Detecting Attacks in SDN

Open access
Elsayed, Mahmoud Said, Le-Khac, Nhien-An, Dev, Soumyabrata, Jurcut, Anca Delia·2019·2019 IEEE 7th International Conference on Computer Science and Network Technology (ICCSNT)

Abstract

With the advent of Software Defined Networks (SDNs), there has been a rapid advancement in the area of cloud computing. It is now scalable, cheaper, and easier to manage. However, SDNs are more prone to security vulner- abilities as compared to legacy systems. Therefore, machine- learning techniques are now deployed in the SDN infrastructure for the detection of malicious traffic. In this paper, we provide a systematic benchmarking analysis of the existing machine- learning techniques for the detection of malicious traffic in SDNs. We identify the limitations in these classical machine- learning based methods, and lay the foundation for a more robust framework. Our experiments are performed on a publicly available dataset of Intrusion Detection Systems (IDSs).

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1109/iccsnt47585.2019.8962519

Cites

29 of 29 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Conventional approaches for preventing DoS attacks in SDNs are not helpful, as they largely depend upon the flow characteristics of the packets, allowing attackers to deceive the system with slight modifications to the traffic patterns.

    “Conventional approaches for preventing DoS attacks in SDNs are not helpful, as they largely depend upon the flow characteristics of the packets, allowing the attackers to deceive the system with slight modifications to the traffic patterns (e.g., through changing packet headers to make it appear like legitimate traffic) [152].”

    From Zero Trust Architecture (ZTA): A Comprehensive Survey (2022) · cites this paper as [152]

  • SDN platforms are more susceptible to threats because of the separation that exists between their control and data planes.

    “As described in [152], SDN platforms are more susceptible to threats because of the separation that exists between their control and data planes.”

    From Zero Trust Architecture (ZTA): A Comprehensive Survey (2022) · cites this paper as [152]

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

1 of the 30 references couldn’t be matched to a known paper.

Research works printed but not linked: 1

  1. [17]17. A. Aggarwal, "The UCI KDD archive," http://kdd.ics.uci.edu, July 1999.

Cited by

Sorted by citations

Authors
Elsayed, M. S., Le-Khac, N.-A., Dev, S., & Jurcut, A. D.
Affiliations
  • University College Dublin (IE)
  • Science Foundation Ireland (IE)
Venue
2019 IEEE 7th International Conference on Computer Science and Network Technology (ICCSNT)
Publisher
IEEE
Published
2019-10
Pages
277-281
OpenAlex
W2977374708
Cited by
72
References
30
Citations by year
2026: 1 · 2025: 6 · 2024: 13 · 2023: 14 · 2022: 14 · 2021: 16 · 2020: 7 · 2019: 1
FWCI
8.22
Type
conference paper
Language
en
Open access
Locations
  • International Conference on Computer Science and Network Technology (ICCSNT) (publishedVersion)
  • arXiv (Cornell University) (submittedVersion)
  • arXiv (Cornell University)
Topics
  • Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
  • Physical Sciences › Computer Science › Computer Networks and Communications › Software-Defined Networks and 5G
  • Physical Sciences › Computer Science › Hardware and Architecture › Network Packet Processing and Optimization
Keywords
software-defined networking, intrusion detection, malicious traffic detection, network security, machine learning benchmarking, intrusion detection systems, network attack detection

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review