CNN-BiLSTM: A Hybrid Deep Learning Approach for Network Intrusion Detection System in Software-Defined Networking With Hybrid Feature Selection
Top Cited Papers
Open Access
- 7 December 2023
- journal article
- research article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Access
- Vol. 11, 138732-138747
Abstract
A Software-Defined Network (SDN) was designed to simplify network management by allowing the control and management of the entire network from a single place. SDN is commonly used in today’s data center network infrastructures, but new forms of threats such as Distributed Denial-of-Service (DDoS), web attack, and the U2R (User to Root) attack are significant issues that might restrict the widespread adoption of SDNs. Intruders are attractive to SDN controllers because they are valuable targets. An SDN controller can be hijacked by an attacker and used to route traffic in accordance with its own needs, resulting in catastrophic consequences for the whole network. While the unified vision of SDN and deep learning methods opens new possibilities for the security of IDS deployment, the effectiveness of the detection models is dependent on the quality of the training datasets. Even though deep learning for NIDSs has lately shown promising results for a number of issues, the majority of the studies overlooked the impact of data redundancy and an unbalanced dataset. As a consequence, this may adversely affect the resilience of the anomaly detection system, resulting in suboptimal model performance. In this study, we created a hybrid Convolutional Neural Network (CNN) and bidirectional long short-term memory (BiLSTM) network to enhance network intrusion detection using binary and multiclass classification. The effectiveness of the proposed model was tested and assessed using the most frequently used datasets (UNSW-NB15 and NSL-KDD). In addition, we used the InSDN dataset, which is specifically dedicated to SDN. The outcomes demonstrate the efficiency of the proposed model in achieving high accuracy and requiring less training time.Keywords
Funding Information
- TÜBİTAK ULAKBİM High Performance, Grid Computing Centre
This publication has 40 references indexed in Scilit:
- Machine-Learning Based Threat-Aware System in Software Defined Networks2017
- Predicting network attack patterns in SDN using machine learning approach2016
- Flexible Network-Based Intrusion Detection and Prevention System on Software-Defined Networks2015
- UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set)2015
- Efficient anomaly detection and mitigation in software defined networking environment2015
- Encouragement of Collaborative Learning Based on Dynamic Groups2012
- Revisiting Traffic Anomaly Detection Using Software Defined Networking2011
- OpenFlowACM SIGCOMM Computer Communication Review, 2008
- Random ForestsMachine Learning, 2001
- Long Short-Term MemoryNeural Computation, 1997