Abstract
The advancement of technology allows for easy adaptability with IoT devices. Internet of Things (IoT) devices can interact without human intervention, which leads to the creation of smart cities. Nevertheless, security concerns persist within IoT networks. To address this, Software Defined Networking (SDN) has been introduced as a centrally controlled network that can solve security issues in IoT devices. Although there is a security concern with integrating SDN and IoT, it specifically targets Distributed Denial of Service (DDoS) attacks. These attacks focus on the network controller since it is centrally controlled. Real-time, high-performance, and precise solutions are necessary to tackle this issue effectively. In recent years, there has been a growing interest in using intelligent deep learning techniques in Network Intrusion Detection Systems (NIDS) through a Software-Defined IoT network (SDN-IoT). The concept of a Wireless Network Intrusion Detection System (WNIDS) aims to create an SDN controller that efficiently monitors and manages smart IoT devices. The proposed WNIDS method analyzes the CSE-CIC-IDS2018 and SDN-IoT datasets to detect and categorize intrusions or attacks in the SDN-IoT network. Implementing a deep learning method called Bidirectional LSTM (BiLSTM)--based WNIDS model effectively detects intrusions in the SDN-IoT network. This model has achieved impressive accuracy rates of 99.97% and 99.96% for binary and multi-class classification using the CSE-CIC-IDS2018 dataset. Similarly, with the SDN-IoT dataset, the model has achieved 95.13% accuracy for binary classification and 92.90% accuracy for multi-class classification, showing superior performance in both datasets.
Similar content being viewed by others
Explore related subjects
Discover the latest articles, news and stories from top researchers in related subjects.Data availability
Data used in this study are available from the first author upon request.
References
Farhady H, Lee H, Nakao A (2015) Software-defined networking: a survey. Comput Netw 81:79–95. https://doi.org/10.1016/j.comnet.2015.02.014
Bera S, Misra S, Vasilakos AV (2017) Software-defined networking for internet of things: a survey. IEEE Internet Things J 4(6):1994–2008. https://doi.org/10.1109/JIOT.2017.2746186
PrzemyslawKazienko& Piotr Dorosz Intrusion detection systems (IDS) Part I - (network intrusions; attack symptoms; IDS tasks; and IDS architecture). www.windowsecurity.com › Articles & Tutorials
Wang S et al (2022) Detecting flooding DDoS attacks in software-defined networks using supervised learning techniques. Eng Sci Technol Int J 35:101176. https://doi.org/10.1016/j.jestch.2022.101176
Sahoo KS et al (2020) An Evolutionary SVM Model for DDOS Attack Detection in Software Defined Networks, in IEEE Access, vol. 8, pp. 132502–132513, https://doi.org/10.1109/ACCESS.2020.3009733. https://doi.org/10.1109/ACCESS.2020.3009733
Shaikh M, Asma, Sita D, Devulapalli (2020) Anomaly Based Intrusion Detection System Using Deep Learning MethodsJune 26, Proceedings of the International Conference on Recent Advances in Computational Techniques (IC-RACT) 2020, https://doi.org/10.2139/ssrn.3699870
Tan L, Pan Y, Wu J, Zhou J, Jiang H, Deng Y (2020) A new framework for DDoS attack detection and defense in SDN environment, IEEEAccess, vol. 8, pp. 161908–161919, https://doi.org/10.1109/ACCESS.2020.3021435
Bindra N, Sood M (2020) Evaluating the impact of feature selection methods on the performance of the machine learning models in detecting DDoS attacks. Romanian J Inform Sci Technol 23(3):250–261
Kanimozhi V, Prem Jacob T (2021) ICT Express 7(3):366–370. https://doi.org/10.1016/j.icte.2020.12.004. Artificial Intelligence outflanks all other machine learning classifiers in Network Intrusion Detection System on the realistic cyber dataset CSECIC- IDS2018 using cloud computing
Di Mauro, Mario G, Galatro G, Fortino, Liotta A (2021) Supervised feature selection techniques in network intrusion detection: a critical review. Eng Appl Artif Intell 101:104216. https://doi.org/10.1016/j.engappai.2021.104216
Hajisalem V, Babaie S (2018) A hybrid intrusion detection system based on ABC-AFS algorithm for misuse and anomaly detection. Comput Netw 136:37–50. https://doi.org/10.1016/j.comnet.2018.02.028
Sri Vidhya G, Nagarajan R (2022) Performance Analysis of Network Traffic Intrusion Detection System Using Machine Learning Technique. Int J Commun Antenna Propag (IRECAP) 12(2):111–119. https://doi.org/10.15866/irecap.v12i2.21724
Pampapathi BM, Guptha N, Hema MS (2022) Towards an effective deep learning-based intrusion detection system in the internet of things. Telematics Inf Rep 7:100009. https://doi.org/10.1016/j.teler.2022.100009
Ferrag M, Amine et al (2020) Deep learning for cyber security intrusion detection: approaches, datasets, and comparative study. J Inform Secur Appl 50:102419. https://doi.org/10.1016/j.jisa.2019.102419
Emec M, Ozcanhan MH (2022) A Hybrid Deep Learning Approach for Intrusion Detection in IoT Networks. Adv Electr Comput Eng 22(1):3–12. https://doi.org/10.4316/AECE.2022.01001
Srividhya G, Nagarajan R, Kannadhasan S (1921) Enhancement of clustering techniques efficiency for WSN using LEACH algorithm. Journal of Physics: Conference Series. Vol. No. 1. IOP Publishing, 2021. https://doi.org/10.1088/1742-6596/1921/1/012013
Schuster M, Kuldip K, Paliwal (1997) Bidirectional recurrent neural networks. Signal Processing. IEEE Trans on 45(11):2673 2681.2. Awni Hannun, Carl Case, Jared Casper, Bryan Catanzaro, Greg Diamos, Erich Elsen, Ryan. https://doi.org/10.1109/78.650093
Sarica AK, Angin P (2020) A novel sdn dataset for intrusion detection in IoT networks, in 2020 16th International Conference on Network and Service Management (CNSM). IEEE, pp. 1–5. https://doi.org/10.23919/CNSM50824.2020.9269042
IDS (2018) | Datasets | Research | Canadian Institute for Cybersecurity UNB. https://www.unb.ca/cic/datasets/ids-2018.html
A Realistic Cyber Defense Dataset (CSE-CIC-IDS (2018) was accessed on 20-05-2023 from https://registry.opendata.aws/cse-cic-ids2018
Abdulrahman AA, Ibrahem MK (Feb. 2019) Evaluation of DDoS attacks detection in a new intrusion dataset based on classification algorithms. Iraqi J Inform Commun Technol 1(3):49–55. https://doi.org/10.31987/ijict.1.3.40
Sudar KM, Beulah M, Deepalakshmi P, Nagaraj P, Chinnasamy P (2021) Detection of Distributed Denial of Service Attacks in SDN using Machine learning techniques, 2021 International Conference on Computer Communication and Informatics (ICCCI), Jan. https://doi.org/10.1109/ICCCI50826.2021.9402517
Kim J et al (2020) June., CNN-Based network intrusion detection against denial-of-service attacks, Electronics, vol. 9, no. 6, p. 916. https://doi.org/10.3390/electronics9060916
Kaja N, Shaout A, Ma (2019) Di. An intelligent intrusion detection system. Appl Intell 49:3235–3247. https://doi.org/10.1007/s10489-019-01436-1
Latah M, Toker L (Nov. 2018) Towards an efficient anomaly?based intrusion detection for software-defined networks. IET Networks 7(6):453–459. https://doi.org/10.1049/iet-net.2018.5080
Funding
No funding was received for conducting this study.
Author information
Authors and Affiliations
Contributions
All authors contributed to the study’s conception and design. Conceptualization, Resources, Data Curation, Software, Visualization, and Writing were performed by Sri vidhya. G. and Supervision, Implementation, Performance analysis, Result discussion, and Writing- review and editing were performed by R. Nagarajan. All authors read and approved the final manuscript.
Corresponding authors
Ethics declarations
Ethical approval
Not applicable.
Informed consent
Not applicable.
Competing interests
The authors declare no competing interests.
Additional information
Publisher’s Note
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Rights and permissions
Springer Nature or its licensor (e.g. a society or other partner) holds exclusive rights to this article under a publishing agreement with the author(s) or other rightsholder(s); author self-archiving of the accepted manuscript version of this article is solely governed by the terms of such publishing agreement and applicable law.
About this article
Cite this article
Sri vidhya, G., Nagarajan, R. A novel bidirectional LSTM model for network intrusion detection in SDN-IoT network. Computing 106, 2613–2642 (2024). https://doi.org/10.1007/s00607-024-01295-w
Received:
Accepted:
Published:
Issue Date:
DOI: https://doi.org/10.1007/s00607-024-01295-w