Advanced DDoS attack detection and mitigation in software-defined networking (SDN) environments: an integrated machine learning approach.

Gayantha, Nadeera; Rajapakse, Chathura; Senanayake, Janaka

Abstract

The increasing sophistication of Distributed Denial of Service (DDoS) attacks poses critical challenges to network security, necessitating advanced detection and mitigation strategies. This research presents a machine learning-based framework that effectively distinguishes between normal and malicious traffic using engineered features such as unique source counts, flow counts, and packet rates. Among the models evaluated, Random Forest demonstrated the highest accuracy at 95.3%, showcasing its effectiveness in identifying diverse attack patterns. The framework incorporates a dynamic mitigation module that adapts in real-time to block or redirect malicious traffic while minimizing disruption to legitimate operations. Comprehensive evaluation confirms its scalability and relevance to real-world network environments. Despite its strengths, limitations include reliance on synthetic datasets and computational demands. Future work will address these challenges by integrating real-world traffic data, exploring advanced learning techniques, and enhancing resource efficiency. This study offers a scalable and adaptive solution to evolving DDoS threats.

Citation

GAYANTHA, N., RAJAPAKSE, C. and SENANAYAKE, J. 2025. Advanced DDoS attack detection and mitigation in software-defined networking (SDN) evironments: an integrated machine learning approach. In Proceedings of the 8th International research conference on Smart computing and systems Engineering 2025 (SCSE 2025), 3 April 2025, Colombo, Sri Lanka. Piscataway: IEEE [online], pages 1-6. Available from: https://doi.org/10.1109/SCSE65633.2025.11030982

• Presentation Conference Type: Conference Paper (published)
• Conference Name: 8th International research conference on Smart computing and systems engineering 2025 (SCSE 2025)
• Start Date: Apr 3, 2025
• End Date: Apr 3, 2025
• Acceptance Date: Feb 7, 2025
• Online Publication Date: Apr 3, 2025
• Publication Date: Apr 3, 2025
• Deposit Date: Jun 20, 2025
• Publicly Available Date: Jul 8, 2025
• Publisher: Institute of Electrical and Electronics Engineers (IEEE)
• Peer Reviewed: Peer Reviewed
• Pages: 1-6
• Series ISSN: 2613-8662
• DOI: https://doi.org/10.1109/SCSE65633.2025.11030982
• Keywords: Anomaly detection; DDoS detection; Machine learning; Network security; SDN
• Public URL: https://rgu-repository.worktribe.com/output/2885917