[go: up one dir, main page]
More Web Proxy on the site http://driver.im/ Skip to main content
Log in

An empirical study for the traffic flow rate prediction-based anomaly detection in software-defined networking: a challenging overview

  • Original Article
  • Published:
Social Network Analysis and Mining Aims and scope Submit manuscript

Abstract

Currently, there is an enormous disturbance regarding privacy in information and communication technology around the scientific community. Since any assault or abnormality in the network can seriously disturb numerous realms like national security, private data storage, social welfare, economic issues, and so on. Consequently, one of the domains for detecting intrusion in the network is anomaly detection domain and it is a wide probe area. Various numerous methods and approaches have developed for anomaly detection. In the network security field, traffic anomaly detection has been a main aspect. The network security domain recognizes assaults in terms of significant deviations from the entrenched regular usage profiles. Nowadays, software-defined networking (SDN) is a new networking model has developed to ease effectual network control and management. This view investigates 50 probe papers focused on traffic flow rate prediction-based anomaly detection in SDN. Furthermore, it presents technique wise classifications like flow counting-based techniques, information theory-based approaches, entropy-based techniques, deep learning (DL)-based approaches, hybrid methods and network methods. An examination includes in an overview based on classification research techniques, toolset used, years of publication, datasets, and evaluation metrics for predicting anomaly in the SDN environment. Lastly, the limitations of surveyed techniques are explained, that encourage investigators for inventing more new techniques for predicting anomaly in SDN.

This is a preview of subscription content, log in via an institution to check access.

Access this article

Subscribe and save

Springer+ Basic
£29.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Price includes VAT (United Kingdom)

Instant access to the full article PDF.

Fig. 1
Fig. 2
Fig. 3
Fig. 4

Similar content being viewed by others

Data availability

No new data were generated or analyzed in support of this research.

References

  • Aljawarneh S, Yassein MB (2019) An enhanced J48 classification algorithm for the anomaly intrusion detection systems”. Cluster Comput 22(5):10549–10565

    Article  Google Scholar 

  • Boopathi M (2022) Henry maxnet: tversky index based feature selection and competitive swarm henry gas solubility optimization integrated deep maxout network for intrusion detection in IoT. Int J Intell Robot Appl 6(2):365–383

    Article  Google Scholar 

  • Carvalho LF, Abrão T, de Souza ML, Proença ML Jr (2018) An ecosystem for anomaly detection and mitigation in software-defined networking. Expert Syst Appl 104:121–133

    Article  Google Scholar 

  • Carvalho LF, Fernandes G, Rodrigues JJ, Mendes LS and Proença ML. (2017) “A novel anomaly detection system to assist network management in SDN environment”. In: 2017 IEEE international conference on communications (ICC), pp 1–6, IEEE, May

  • Chaudhary R, Kumar N (2019) LOADS: load optimization and anomaly detection scheme for software-defined networks. IEEE Trans Veh Technol 68(12):12329–12344

    Article  Google Scholar 

  • Chen JIZ, Smys S (2020) Social multimedia security and suspicious activity detection in SDN using hybrid deep learning technique. J Inf Technol 2(2):108–115

    Google Scholar 

  • Dawoud A, Shahristani S and Raun C (2019) “Unsupervised deep learning for software defined networks anomalies detection”. In: transactions on computational collective intelligence XXXIII, pp 167–178, Springer, Berlin

  • Dey SK, Rahman MM (2019) Effects of machine learning approach in flow-based anomaly detection on software-defined networking. Symmetry 12(1):7

    Article  Google Scholar 

  • Elsayed MS, Le-Khac NA, Jahromi HZ and Jurcut AD (2021) “A hybrid CNN-LSTM based approach for anomaly detection systems in SDNs”. The 16th International Conference on Availability, Reliability and Security

  • El-Shamy AM, El-Fishawy NA, Attiya G, Mohamed MA (2021) Anomaly detection and bottleneck identification of the distributed application in cloud data center using software–defined networking. Egyptian Inform J 22(4):417–432

    Article  Google Scholar 

  • Garg G, Garg R (2015) Accurate anomaly detection using adaptive monitoring and fast switching in SDN. Int J Inform Technol Comput Sci (IJITCS) 7(11):34–42

    Google Scholar 

  • Garg S, Kaur K, Kumar N, Rodrigues JJ (2019) Hybrid deep-learning-based anomaly detection scheme for suspicious flow detection in SDN: A social multimedia perspective. IEEE Trans Multimedia 21(3):566–578

    Article  Google Scholar 

  • Garg S, Singh A, Aujla GS, Kaur S, Batra S, Kumar N (2020) A probabilistic data structures-based anomaly detection scheme for software-defined Internet of vehicles. IEEE Trans Intell Transp Syst 22(6):3557–3566

    Article  Google Scholar 

  • Garg G and Garg R (2016) “Security of networks using efficient adaptive flow counting for anomaly detection in SDN”. In: artificial intelligence and evolutionary computations in engineering systems, pp 667–674, Springer, New Delhi

  • Giotis K, Argyropoulos C, Androulidakis G, Kalogeras D, Maglaris V (2014a) Combining openflow and sflow for an effective and scalable anomaly detection and mitigation mechanism on SDN environments. Comput Netw 62:122–136

    Article  Google Scholar 

  • Giotis K, Androulidakis G, and Maglaris V (2014b) “Leveraging SDN for efficient anomaly detection and mitigation on legacy networks”, In: 2014b third European workshop on software defined networks pp 85–90, IEEE, Sept 2014b.

  • Ha T, Kim S, An N, Narantuya J, Jeong C, Kim J, Lim H (2016) Suspicious traffic sampling for intrusion detection in software-defined networks. Comput Netw 109:172–182

    Article  Google Scholar 

  • He D, Chan S, Ni X, Guizani M (2017) Software-defined-networking-enabled traffic anomaly detection and mitigation. IEEE Internet Things J 4(6):1890–1898

    Article  Google Scholar 

  • Hussein ZK and Dhannoon BN(2019) “Deep neural network with dropout for anomaly detection in software defined networking”. Int J Innov Technol Exploring Eng (IJITEE) ISSN 8(11):2278–3075

  • Jaber AN (2020) Rehman SU “FCM–SVM based intrusion detection system for cloud computing environment.” Cluster Comput 23:3221–3231

    Article  Google Scholar 

  • Jafarian T, Masdari M, Ghaffari A, Majidzadeh K (2020) Security anomaly detection in software-defined networking based on a prediction technique. Int J Commun Syst 33(14):4524

    Article  Google Scholar 

  • Jafarian T, Masdari M, Ghaffari A, Majidzadeh K (2021) SADM-SDNC: security anomaly detection and mitigation in software-defined networking using C-support vector classification. Computing 103(4):641–673

    Article  MathSciNet  Google Scholar 

  • Jung O, Smith P, Magin J and Reuter L (2019) “Anomaly detection in smart grids based on software defined networks”. In: SMARTGREENS, pp 157–164

  • Karakus M, Durresi A (2017) Quality of service (QoS) in software defined networking (SDN): a survey. J Netw Comput Appl 80:200–218

    Article  Google Scholar 

  • Karmakar KK, Varadharajan V, Tupakula U (2019) Mitigating attacks in software defined networks. Cluster Comput 22(4):1143–1157

    Article  Google Scholar 

  • Kreutz D, Ramos FM and Verissimo P (2013) “Towards secure and dependable software-defined networks”. In: proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking, pp 55–60, Aug

  • KURT Ç and Erdem OA, (2020) Real-time anomaly detection and mitigation using streaming telemetry in SDN. Turkish J Electric Eng Comput Sci 28(5):2448–2466

    Article  Google Scholar 

  • Kwon D, Natarajan K, Suh SC, Kim H and Kim J (2018) “An empirical study on network anomaly detection using convolutional neural networks”. In: ICDCS, pp 1595–1598, July

  • Lai YC, Zhou KZ, Lin, SR and Lo, NW (2019) “F1ow-based anomaly detection using multilayer perceptron in software defined networks”, In: 2019 42nd international convention on information and communication technology, electronics and microelectronics (MIPRO), pp 1154–1158, IEEE, May 2019

  • Lee S, Kim J, Shin S, Porras P and Yegneswaran V (2017) “Athena: a framework for scalable anomaly detection in software-defined networks”. In: 2017 47th annual IEEE/IFIP international conference on dependable systems and networks (DSN), pp 249–260, IEEE, June

  • Li Q, Liu Y, Liu Z, Zhang P, Pang C (2021) Efficient forwarding anomaly detection in software-defined networks. IEEE Trans Parallel Distrib Syst 32(11):2676–2690

    Article  Google Scholar 

  • Madhawa S, Balakrishnan P, Arumugam U (2018) Employing invariants for anomaly detection in software defined networking based industrial internet of things. J Intell Fuzzy Syst 35(2):1267–1279

    Article  Google Scholar 

  • Mehdi SA, Khalid J and Khayam SA (2011) “Revisiting traffic anomaly detection using software defined networking”. In: International workshop on recent advances in intrusion detection pp 161–180, Springer, Berlin, 2011

  • Mukkesh Ganesh, B Saleena, and B Prakash (2022) "Knowledge engineering challenges in smart healthcare data analysis system". Handbook Intell Healthcare Analyt Knowledge Eng Big Data pp 285

  • Nazar MJ, Alhudhaif A, Qureshi KN, Iqbal S and Jeon G (2021) “Signature and flow statistics based anomaly detection system in software-defined networking for 6G internet of things network”. International J Syst Assurance Eng Manage pp1–11

  • Novaes MP, Carvalho LF, Lloret J, Proença ML (2020) Long short-term memory and fuzzy logic for anomaly detection and mitigation in software-defined network environment. IEEE Access 8:83765–83781

    Article  Google Scholar 

  • Peng H, Sun Z, Zhao X, Tan S, Sun Z (2018) A detection method for anomaly flow in software defined network. IEEE Access 6:27809–27817

    Article  Google Scholar 

  • Phan TV, Nguyen TG, Dao NN, Huong TT, Thanh NH, Bauschert T (2020) Deep guard: efficient anomaly detection in SDN with fine-grained traffic flow monitoring. IEEE Trans Netw Serv Manage 17(3):1349–1362

    Article  Google Scholar 

  • Poornima N, Saleena B (2020) An automated approach to retrieve lecture videos using context based semantic features and deep learning. Sādhanā 45(1):1–11

    Article  Google Scholar 

  • Qin Y, Wei J and Yang W (2019) “Deep learning based anomaly detection scheme in software-defined networking”. In: 2019 20th Asia-Pacific network operations and management symposium (APNOMS) pp.1–4, IEEE, Sept 2019

  • Qin J, Zhang X and Li P (2020) “anomaly detection based on feature correlation and influence Degree in SDN”. In: 2020 international conferences on internet of things (iThings) and IEEE green computing and communications (GreenCom) and IEEE cyber, physical and social computing (CPSCom) and IEEE smart data (smartdata) and IEEE congress on cybermatics (Cybermatics) pp 186–192, IEEE, Nov

  • Rama Krishna Meher (2021) Hybrid grasshopper optimization and bat algorithm based DBN for intrusion detection in cloud. Multimedia Res 4(4):31–38

    Article  Google Scholar 

  • Ribeiro ADRL, Santos RYC and Nascimento, ACA (2021) “Anomaly detection technique for intrusion detection in SDN environment using continuous data stream machine learning algorithms”. In 2021 IEEE international systems conference (SysCon), pp 1–7, IEEE, Apr

  • Rinaldi G, Adamsky F, Soua R, Baiocchi A and Engel T (2019) “Softwarization of SCADA: lightweight statistical SDN-agents for anomaly detection”. In: 2019 10th international conference on networks of the future (NoF), pp 102–109, IEEE, Oct

  • Sahri NM, Okamura K (2016) Adaptive query rate for anomaly detection with SDN. IJCSNS 16(6):43

    Google Scholar 

  • Said Elsayed M, Le-Khac NA, Dev S and Jurcut AD (2020) “Network anomaly detection using LSTM based autoencoder”, In: proceedings of the 16th ACM symposium on qos and security for wireless and mobile networks, pp 37–45, Nov

  • Sampaio LS, Faustini PH, Silva AS, Granville LZ and Schaeffer-Filho A (2018) “Using NFV and reinforcement learning for anomalies detection and mitigation in SDN”. In: 2018 IEEE symposium on computers and communications (ISCC), pp 00432–00437, IEEE, June

  • Satheesh N, Rathnamma MV, Rajeshkumar G, Sagar PV, Dadheech P, Dogiwal SR, Velayutham P, Sengan S (2020) Flow-based anomaly intrusion detection using machine learning model with software defined networking for openflow network. Microprocess Microsyst 79:103285

    Article  Google Scholar 

  • Sathya R, Saleena B (2022) A framework for designing unsupervised pothole detection by integrating feature extraction using deep recurrent neural network. Wireless Personal Commun 126(2):1241–1271

    Article  Google Scholar 

  • Shafi Q, Basit A, Qaisar S, Koay A, Welch I (2018) Fog-assisted SDN controlled framework for enduring anomaly detection in an IoT network. IEEE Access 6:73713–73723

    Article  Google Scholar 

  • Shafi Q, Qaisar S, and Basit A (2019) “Software defined machine learning based anomaly detection in fog based iot network”, In: international conference on computational science and its applications, pp 611–621, Springer, Cham, July 2019

  • Starke A, McNair J, Trevizan R, Bretas A, Peeples J and Zare A“(2018) Toward resilient smart grid communications using distributed sdn with ml-based anomaly detection”. In: international conference on wired/wireless internet communication, pp 83–94, Springer, Cham, June

  • Sun R, Zhang S, Yin C, Wang J (2019) Min S “strategies for data stream mining method applied in anomaly detection.” Cluster Comput 22(2):399–408

    Article  Google Scholar 

  • Tuan A Tang, Lotfi Mhamdi, Des McLernon, Syed Ali Raza Zaidi, and Mounir Ghogho (2016) “Deep learning approach for network intrusion detection in software defined networking”. In: 2016 international conference on wireless networks and mobile communications (WINCOM), IEEE, pp 258–263

  • Tantar E, Tantar AA, Kantor M and Engel T (2018) “On using cognition for anomaly detection in SDN”, In EVOLVE-A bridge between probability, set oriented numerics, and evolutionary computation VI. Pp 67-81, Springer, Cham

  • Tuan NN, Nghia ND, Hung PH, Tuyen DK, Hieu NM, Hung NT and Thanh NH (2021) “An abnormal network traffic detection scheme using local outlier factor in SDN”. In: 2020 IEEE eighth international conference on communications and electronics (ICCE) pp 141–146, IEEE, Jan

  • Wang J (2019) Xia L “abnormal behavior detection in videos using deep learning.” Cluster Comput 22(4):9229–9239

    Article  Google Scholar 

  • Wang M, Zhou H, Chen J (2018) A moving window principal components analysis based anomaly detection and mitigation approach in SDN network. KSII Trans Int Inform Sys (TIIS) 12(8):3946–3965

    Google Scholar 

  • Wang B, Sun Y, Xu X (2019) Loose game theory based anomaly detection scheme for SDN-based mMTC services. IEEE Access 7:139350–139357

    Article  Google Scholar 

  • Wang B, Sun Y, Xu X (2020) A scalable and energy-efficient anomaly detection scheme in wireless SDN-based mMTC networks for IoT. IEEE Internet Things J 8(3):1388–1405

    Article  Google Scholar 

  • Xia W, Wen Y, Foh CH, Niyato D, Xie H (2015) A survey on software-defined networking. IEEE Commun Surv Tutorials 17(1):27–51

    Article  Google Scholar 

  • Yin C, Zhang S, Yin Z (2019) Wang J “anomaly detection model based on data stream clustering.” Cluster Comput 22:1729–1738

    Article  Google Scholar 

  • You-Chiun Wang and Siang-Yu You (2018) An efficient route management framework for load balance and overhead reduction in SDN-based data center networks. IEEE Trans Net Service Manage 15(4):1422–1434

    Article  Google Scholar 

  • Zhang P, Zhang F, Xu S, Yang Z, Li H, Li Q, Wang H, Shen C, Hu C (2020) Network-wide forwarding anomaly detection and localization in software defined networks. IEEE/ACM Trans Networking 29(1):332–345

    Article  Google Scholar 

  • Zhou L, Shu J and Jia X (2020)“Collaborative anomaly detection in distributed SDN”, In: GLOBECOM 2020–2020 IEEE global communications conference, pp. 1–6, IEEE

Download references

Acknowledgements

I would like to express my very great appreciation to the co-authors of this manuscript for their valuable and constructive suggestions during the planning and development of this research work.

Funding

This research did not receive any specific funding.

Author information

Authors and Affiliations

Authors

Contributions

All authors have made substantial contributions to conception and design, revising the manuscript, and the final approval of the version to be published. Also, all authors agreed to be accountable for all aspects of the work in ensuring that questions related to the accuracy or integrity of any part of the work are appropriately investigated and resolved.

Corresponding author

Correspondence to Nirav M Raja.

Ethics declarations

Conflict of interest

The authors declare no conflict of interest.

Ethical approval

Not Applicable.

Informed consent

Not Applicable.

Additional information

Publisher's Note

Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.

Rights and permissions

Springer Nature or its licensor (e.g. a society or other partner) holds exclusive rights to this article under a publishing agreement with the author(s) or other rightsholder(s); author self-archiving of the accepted manuscript version of this article is solely governed by the terms of such publishing agreement and applicable law.

Reprints and permissions

About this article

Check for updates. Verify currency and authenticity via CrossMark

Cite this article

Raja, N.M., Vegad, S. An empirical study for the traffic flow rate prediction-based anomaly detection in software-defined networking: a challenging overview. Soc. Netw. Anal. Min. 13, 72 (2023). https://doi.org/10.1007/s13278-023-01057-0

Download citation

  • Received:

  • Revised:

  • Accepted:

  • Published:

  • DOI: https://doi.org/10.1007/s13278-023-01057-0

Keywords

Navigation