Machine Learning Approaches for Combating Distributed Denial of Service Attacks in Modern Networking Environments

• Published in: IEEE access Vol. 9; pp. 42236 - 42264
• Main Author: Aljuhani, Ahamed
• Format: Journal Article
• Language: English
• Published: Piscataway IEEE 2021; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Cloud computing; Cyberattack; Cybersecurity; DDoS attacks and detection; Denial of service attacks; Denial-of-service attack; Economic impact; Floods; Internet of Things; Internet of Things (IoT); Machine learning; machine learning (ML); Network function virtualization; network functions virtualization (NFV); Security management; software-defined network (SDN); Software-defined networking; System effectiveness; Virtual environments
• ISSN: 2169-3536; 2169-3536
• DOI: 10.1109/ACCESS.2021.3062909

A distributed denial of service (DDoS) attack represents a major threat to service providers. More specifically, a DDoS attack aims to disrupt and deny services to legitimate users by overwhelming the target with a massive number of malicious requests. A cyberattack of this kind is likely to result in tremendous economic losses for businesses and service providers due to increasing both operating and financial costs. In recent years, machine learning (ML) techniques have been widely used to prevent DDoS attacks. Indeed, many defense systems have been transformed into smart and intelligent systems through the use of ML techniques, which allow them to defeat DDoS attacks. This paper analyzes recent studies concerning DDoS detection methods that have adapted single and hybrid ML approaches in modern networking environments. Additionally, the paper discusses different DDoS defense systems based on ML techniques that make use of a virtualized environment, including cloud computing, software-defined network, and network functions virtualization environments. As the development of the Internet of Things (IoT) has been the subject of significant research attention in recent years, the paper also discusses ML approaches as security solutions against DDoS attacks in IoT environments. Furthermore, the paper recommends a number of directions for future research. This paper is intended to assist the research community with the design and development of effective defense systems capable of overcoming different types of DDoS attacks.