AI-based Two-Stage Intrusion Detection for Software Defined IoT Networks
Software Defined Internet of Things (SD-IoT) Networks profits from centralized management and interactive resource sharing which enhances the efficiency and scalability of IoT applications. But with the rapid growth in services and applications, it is vulnerable to possible attacks and faces severe security challenges. Intrusion detection has been widely used to ensure network security, but classical detection means are usually signature-based or explicit-behavior-based and fail to detect unknown attacks intelligently, which are hard to satisfy the requirements of SD-IoT Networks. In this paper, we propose an AI-based two-stage intrusion detection empowered by software defined technology. It flexibly captures network flows with a globle view and detects attacks intelligently through applying AI algorithms. We firstly leverage Bat algorithm with swarm division and Differential Mutation to select typical features. Then, we exploit Random forest through adaptively altering the weights of samples using weighted voting mechanism to classify flows. Evaluation results prove that the modified intelligent algorithms select more important features and achieve superior performance in flow classification. It is also verified that intelligent intrusion detection shows better accuracy with lower overhead comparied with existing solutions.
Code (0)
등록된 구현이 없습니다.
Tasks
Intrusion DetectionManagementVocal Bursts Valence PredictionSimilar Papers 제목 키워드 기반
A Machine Learning Based Intrusion Detection System for Software Defined 5G Network
As an inevitable trend of future 5G networks, Software Defined architecture has many advantages in providing central- ized control and flexible resource management. But it is also confronted with various security challen…
BIG-bench Machine LearningIntrusion DetectionManagementTowards an Efficient Anomaly-Based Intrusion Detection for Software-Defined Networks
Software-defined networking (SDN) is a new paradigm that allows developing more flexible network applications. SDN controller, which represents a centralized controlling point, is responsible for running various network …
Intrusion DetectionSDNGuardStack: An Explainable Ensemble Learning Framework for High-Accuracy Intrusion Detection in Software-Defined Networks
Software-Defined Networking (SDN) is another technology that has been developing in the last few years as a relevant technique to improve network programmability and administration. Nonetheless, its centralized design pr…
Intrusion DetectionEnsemble LearningC-RADAR: A Centralized Deep Learning System for Intrusion Detection in Software Defined Networks
The popularity of Software Defined Networks (SDNs) has grown in recent years, mainly because of their ability to simplify network management and improve network flexibility. However, this also makes them vulnerable to va…
Computational EfficiencyIntrusion DetectionAttribution-Driven Explainable Intrusion Detection with Encoder-Based Large Language Models
Software-Defined Networking (SDN) improves network flexibility but also increases the need for reliable and interpretable intrusion detection. Large Language Models (LLMs) have recently been explored for cybersecurity ta…
Network Intrusion DetectionRepresentation Learning