Abnormal traffic detection system in SDN based on deep learning hybrid models

TL;DR

This paper presents a hierarchical abnormal traffic detection system for SDN using deep learning hybrid models, improving detection speed and accuracy over traditional methods.

Contribution

It introduces a novel hierarchical detection approach combining port information, wavelet transform, and deep learning for efficient SDN traffic anomaly detection.

Findings

Quick localization of abnormal traffic sources

Enhanced accuracy, precision, and recall in detection

Outperforms traditional SDN anomaly detection methods

Abstract

Software defined network (SDN) provides technical support for network construction in smart cities, However, the openness of SDN is also prone to more network attacks. Traditional abnormal traffic detection methods have complex algorithms and find it difficult to detect abnormalities in the network promptly, which cannot meet the demand for abnormal detection in the SDN environment. Therefore, we propose an abnormal traffic detection system based on deep learning hybrid model. The system adopts a hierarchical detection technique, which first achieves rough detection of abnormal traffic based on port information. Then it uses wavelet transform and deep learning techniques for fine detection of all traffic data flowing through suspicious switches. The experimental results show that the proposed detection method based on port information can quickly complete the approximate localization of the source of abnormal traffic. the accuracy, precision, and recall of the fine detection are significantly improved compared with the traditional method of abnormal traffic detection in SDN.