Low-Rate Attack Detection on SD-IoT Using SVM Combined with Feature Importance Logistic Regression Coefficient

Abstract

The evolution of computer network technology is now experiencing substantial changes, particularly with the introduction of a new paradigm, Software Defined Networking (SDN). The SDN architecture has been applied in a variety of networks, including the Internet of Things (IoT), which is known as SD-IoT. IoT is made up of billions of networking devices that are interconnected and linked to the Internet. Since the SD-IoT was considered as a complex entity, several types of attack on vulnerabilities vary greatly and can be exploited by careless individuals. Low-Rate Distributed Denial of Service (LRDDoS) is one of the availability-based attack that may affect the SD-IoT integration paradigm. Therefore, it is necessary to have an Intrusion Detection System (IDS) to overcome the security hole caused by LRDDoS. The main objective of this research was the establishment of an IDS application for resolving LRDDoS attack using the SVM algorithm combined with the Feature Importance method, namely the Logistic Regression Coefficient. The implemented approach was developed to reduce the complexity or resource’s consumption during the classification process as well as increasing the accuracy. It could be concluded that the Linear kernel SVM algorithm acquired the highest results on the test schemes at 100% accuracy, but the training time required for this model was longer, about 23.6 seconds compared to the Radial Basis Function model which only takes about 1.5 seconds.

Multipath Routing Implementation in SD-IoT Network Using OpenFlow-based Routing Metrics

“…Based on five trials using the multipath DFS algorithm, a path was chosen with the smallest cost value in the 5th experiment with paths [13,6,2,3,11,20] and a cost of 1206.88. The alternative path was path [13,6,2,8,3,11,20] with a cost value of 1440.84, and path [13,6,2,9,3,11,20] with a cost value of 1444.02. Meanwhile, from five trials using the Dijkstra multipath algorithm, there was a path with the smallest cost value in the 4th experiment with path [13,6,2,3,11,20] and a cost value of 1263.05.…”

“…Meanwhile, from five trials using the Dijkstra multipath algorithm, there was a path with the smallest cost value in the 4th experiment with path [13,6,2,3,11,20] and a cost value of 1263.05. Other alternative paths were on the path [13,6,2,8,3,11,20] with a cost value of 1498.42 and path [13,5,1,2,3,11,20] with a cost value of 1521.09.…”

“…Effectively the control plane is separated from the data plane and implements a centralized management process on the controller node [7]. IoT can take advantage of SDN to have centralized control, network device abstraction, and flexibility [8], [9]. The SD-IoT controller can be easily programmed according to the needs of the network administrators due to the application-based configuration model [8].…”

“…IoT can take advantage of SDN to have centralized control, network device abstraction, and flexibility [8], [9]. The SD-IoT controller can be easily programmed according to the needs of the network administrators due to the application-based configuration model [8]. This scheme may allow the implementation of multipath routing that runs automatically.…”