paper-with-me

홈 › Papers

Unseen Attack Detection in Software-Defined Networking Using a BERT-Based Large Language Model

2024-12-09 · Mohammed N. Swileh, Shengli Zhang

Software defined networking (SDN) represents a transformative shift in network architecture by decoupling the control plane from the data plane, enabling centralized and flexible management of network resources. However, this architectural shift introduces significant security challenges, as SDN's centralized control becomes an attractive target for various types of attacks. While current research has yielded valuable insights into attack detection in SDN, critical gaps remain. Addressing challenges in feature selection, broadening the scope beyond DDoS attacks, strengthening attack decisions based on multi flow analysis, and building models capable of detecting unseen attacks that they have not been explicitly trained on are essential steps toward advancing security in SDN. In this paper, we introduce a novel approach that leverages Natural Language Processing (NLP) and the pre trained BERT base model to enhance attack detection in SDN. Our approach transforms network flow data into a format interpretable by language models, allowing BERT to capture intricate patterns and relationships within network traffic. By using Random Forest for feature selection, we optimize model performance and reduce computational overhead, ensuring accurate detection. Attack decisions are made based on several flows, providing stronger and more reliable detection of malicious traffic. Furthermore, our approach is specifically designed to detect previously unseen attacks, offering a solution for identifying threats that the model was not explicitly trained on. To rigorously evaluate our approach, we conducted experiments in two scenarios: one focused on detecting known attacks, achieving 99.96% accuracy, and another on detecting unseen attacks, where our model achieved 99.96% accuracy, demonstrating the robustness of our approach in detecting evolving threats to improve the security of SDN networks.

📄 PDF Abstract BibTeX arXiv:2412.06239

Code (0)

등록된 구현이 없습니다.

Tasks

feature selectionLanguage ModelingLanguage ModellingLarge Language Model

Methods 이 논문이 사용한 방법론

Attention 설명 없음
Softmax The Softmax output function transforms a previous layer's output into a vector of probabilities. It is commonly used for multiclass classification. Given an input vector $x$…
Linear Layer A Linear Layer is a projection $\mathbf{XW + b}$.
Linear Warmup With Linear Decay Linear Warmup With Linear Decay is a learning rate schedule in which we increase the learning rate linearly for $n$ updates and then linearly decay afterwards.
Multi-Head Attention 설명 없음
Weight Decay 설명 없음
WordPiece 설명 없음
Layer Normalization Unlike batch normalization, Layer Normalization directly estimates the normalization statistics from the summed inputs…

Similar Papers 제목 키워드 기반

Detection of DDoS Attacks in Software Defined Networking Using Machine Learning Models

2023-03-11 · Ahmad Hamarshe, Huthaifa I. Ashqar, Mohammad Hamarsheh

The concept of Software Defined Networking (SDN) represents a modern approach to networking that separates the control plane from the data plane through network abstraction, resulting in a flexible, programmable and dyna…

A Demonstration of Self-Adaptive Jamming Attack Detection in AI/ML Integrated O-RAN

2025-10-10 · Md Habibur Rahman, Md Sharif Hossen, Nathan H. Stephenson, Vijay K. Shah 외 arxiv

The open radio access network (O-RAN) enables modular, intelligent, and programmable 5G network architectures through the adoption of software-defined networking, network function virtualization, and implementation of st…

Reinforcement Learning for Autonomous Defence in Software-Defined Networking

2018-08-17 · Yi Han, Benjamin I. P. Rubinstein, Tamas Abraham, Tansu Alpcan 외

Despite the successful application of machine learning (ML) in a wide range of domains, adaptability---the very property that makes machine learning desirable---can be exploited by adversaries to contaminate training and…

BIG-bench Machine LearningGeneral Classificationreinforcement-learningReinforcement Learning+1

Long Short-Term Memory Neural Networks for False Information Attack Detection in Software-Defined In-Vehicle Network

2019-06-24 · Zadid Khan, Mashrur Chowdhury, Mhafuzul Islam, Chin-Ya Huang 외

A modern vehicle contains many electronic control units (ECUs), which communicate with each other through the in-vehicle network to ensure vehicle safety and performance. Emerging Connected and Automated Vehicles (CAVs) …

Anomaly DetectionTime SeriesTime Series AnalysisTime Series Classification

Proactive DDoS Detection and Mitigation in Decentralized Software-Defined Networking via Port-Level Monitoring and Zero-Training Large Language Models

2025-11-01 · Mohammed N. Swileh, Shengli Zhang arxiv

Centralized Software-Defined Networking (cSDN) offers flexible and programmable control of networks but suffers from scalability and reliability issues due to its reliance on centralized controllers. Decentralized SDN (d…

Prompt Engineering