An Efficient Hybrid-DNN for DDoS Detection and Classification in Software-Defined IIoT Networks

• Published in: IEEE internet of things journal Vol. 10; no. 10; pp. 8491 - 8504
• Main Authors: Zainudin, Ahmad, Ahakonye, Love Allen Chijioke, Akter, Rubina, Kim, Dong-Seong, Lee, Jae-Min
• Format: Journal Article
• Language: English
• Published: Piscataway IEEE 15.05.2023; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Artificial neural networks; Classification; Complexity; Computer crime; Convolutional neural network and long short-term memory (CNN-LSTM); Cybersecurity; Denial of service attacks; Denial-of-service attack; Distributed Denial-of-Service (DDoS) detection and classification; Feature extraction; feature selection (FS); Floods; Industrial applications; Industrial Internet of Things; Industrial Internet of Things (IIoT); Internet of Things; Low latency communication; Network latency; Software; Software-defined networking; software-defined networking (SDN); Telecommunication traffic
• ISSN: 2327-4662; 2327-4662
• DOI: 10.1109/JIOT.2022.3196942

Software-defined networking (SDN)-based Industrial Internet of Things (IIoT) networks have a centralized controller that is a single attractive target for unauthorized users to attack. Cybersecurity in IIoT networks is becoming the most significant challenge, especially from increasingly sophisticated Distributed Denial-of-Service (DDoS) attacks. This situation necessitates efficient approaches to mitigate recent attacks following the incompetence of existing techniques that focus more on DDoS detection. Most existing DDoS detection capabilities are computationally complex and are no longer efficient enough to protect against DDoS attacks. Thus, the need for a low-cost approach for DDoS attack classification. This study presents a competent feature selection method extreme gradient boosting (XGBoost) for determining the most relevant data features with a hybrid convolutional neural network and long short-term memory (CNN-LSTM) for DDoS attack classification. The proposed model evaluated the CICDDoS2019 data set with improved accuracy and low-complexity capability for low latency IIoT requirements. Performance results show that the proposed model achieves a high accuracy of 99.50% with a time cost of 0.179 ms.