{"id":"https://openalex.org/W4389543370","doi":"https://doi.org/10.1109/csnet59123.2023.10339791","title":"Real-Time Detection of Low-Rate DDoS Attacks in SDN-Based Networks Using Online Machine Learning Model","display_name":"Real-Time Detection of Low-Rate DDoS Attacks in SDN-Based Networks Using Online Machine Learning Model","publication_year":2023,"publication_date":"2023-10-16","ids":{"openalex":"https://openalex.org/W4389543370","doi":"https://doi.org/10.1109/csnet59123.2023.10339791"},"language":"en","primary_location":{"id":"doi:10.1109/csnet59123.2023.10339791","doi":"https://doi.org/10.1109/csnet59123.2023.10339791","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csnet59123.2023.10339791","pdf_url":null,"source":{"id":"https://openalex.org/S7407088103","display_name":"Cyber Security in Networking Conference (CSNet)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 7th Cyber Security in Networking Conference (CSNet)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://www.authorea.com/doi/pdf/10.22541/au.170379738.88140454","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032580013","display_name":"Abdussalam Ahmed Alashhab","orcid":"https://orcid.org/0000-0002-5594-3415","observed_orcids":["https://orcid.org/0000-0002-5594-3415"]},"institutions":[{"id":"https://openalex.org/I203899302","display_name":"Universiti Teknologi Petronas","ror":"https://ror.org/048g2sh07","country_code":"MY","type":"education","lineage":["https://openalex.org/I203899302"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Abdussalam Ahmed Alashhab","raw_affiliation_strings":["Alasmarya Islamic University, Universiti Teknologi Petronas,Department of Computer and Information Science,Seri Iskandar,Malaysia","Department of Computer and Information Science, Alasmarya Islamic University, Universiti Teknologi Petronas, Seri Iskandar, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Alasmarya Islamic University, Universiti Teknologi Petronas,Department of Computer and Information Science,Seri Iskandar,Malaysia","institution_ids":["https://openalex.org/I203899302"]},{"raw_affiliation_string":"Department of Computer and Information Science, Alasmarya Islamic University, Universiti Teknologi Petronas, Seri Iskandar, Malaysia","institution_ids":["https://openalex.org/I203899302"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024546347","display_name":"Mohd Soperi Mohd Zahid","orcid":"https://orcid.org/0000-0001-5042-5793","observed_orcids":["https://orcid.org/0000-0001-5042-5793"]},"institutions":[{"id":"https://openalex.org/I203899302","display_name":"Universiti Teknologi Petronas","ror":"https://ror.org/048g2sh07","country_code":"MY","type":"education","lineage":["https://openalex.org/I203899302"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Mohd Soperi Mohd Zahid","raw_affiliation_strings":["Universiti Teknologi Petronas,Department of Computer and Information Science,Seri Iskandar,Malaysia","Department of Computer and Information Science, Universiti Teknologi Petronas, Seri Iskandar, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Teknologi Petronas,Department of Computer and Information Science,Seri Iskandar,Malaysia","institution_ids":["https://openalex.org/I203899302"]},{"raw_affiliation_string":"Department of Computer and Information Science, Universiti Teknologi Petronas, Seri Iskandar, Malaysia","institution_ids":["https://openalex.org/I203899302"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068619570","display_name":"Mujaheed Abdullahi","orcid":"https://orcid.org/0000-0002-0434-5191","observed_orcids":["https://orcid.org/0000-0002-0434-5191"]},"institutions":[{"id":"https://openalex.org/I203899302","display_name":"Universiti Teknologi Petronas","ror":"https://ror.org/048g2sh07","country_code":"MY","type":"education","lineage":["https://openalex.org/I203899302"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Mujaheed Abdullahi","raw_affiliation_strings":["Universiti Teknologi Petronas,Department of Computer and Information Science,Seri Iskandar,Malaysia","Department of Computer and Information Science, Universiti Teknologi Petronas, Seri Iskandar, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Teknologi Petronas,Department of Computer and Information Science,Seri Iskandar,Malaysia","institution_ids":["https://openalex.org/I203899302"]},{"raw_affiliation_string":"Department of Computer and Information Science, Universiti Teknologi Petronas, Seri Iskandar, Malaysia","institution_ids":["https://openalex.org/I203899302"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100653391","display_name":"Md. Siddikur Rahman","orcid":"https://orcid.org/0000-0001-7308-8961","observed_orcids":["https://orcid.org/0000-0001-7308-8961"]},"institutions":[{"id":"https://openalex.org/I203899302","display_name":"Universiti Teknologi Petronas","ror":"https://ror.org/048g2sh07","country_code":"MY","type":"education","lineage":["https://openalex.org/I203899302"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Md Siddikur Rahman","raw_affiliation_strings":["Universiti Teknologi Petronas,Department of Computer and Information Science,Seri Iskandar,Malaysia","Department of Computer and Information Science, Universiti Teknologi Petronas, Seri Iskandar, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Teknologi Petronas,Department of Computer and Information Science,Seri Iskandar,Malaysia","institution_ids":["https://openalex.org/I203899302"]},{"raw_affiliation_string":"Department of Computer and Information Science, Universiti Teknologi Petronas, Seri Iskandar, Malaysia","institution_ids":["https://openalex.org/I203899302"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I203899302"],"apc_list":null,"apc_paid":null,"fwci":3.5924,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.94299698,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"95","last_page":"101"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ddos-detection","display_name":"DDoS attack detection","score":0.9300000071525574},{"id":"https://openalex.org/keywords/low-rate-ddos-attacks","display_name":"low-rate DDoS attacks","score":0.9710000157356262},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"software-defined networking","score":0.921999990940094},{"id":"https://openalex.org/keywords/e-learning","display_name":"online learning","score":0.7099999785423279},{"id":"https://openalex.org/keywords/passive-aggressive-classifier","display_name":"passive aggressive classifier","score":0.9850000143051147},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.9750000238418579},{"id":"https://openalex.org/keywords/network-traffic-classification","display_name":"network traffic classification","score":0.8270000219345093},{"id":"https://openalex.org/keywords/cicddos2019","display_name":"CICDDoS2019","score":0.8849999904632568}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.9229370355606079},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.848881721496582},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.6180150508880615},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.6129336357116699},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.592854917049408},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5337000489234924},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5307177305221558},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5014524459838867},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.4493381381034851},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4329833388328552},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.37962767481803894},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32987791299819946},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.22438839077949524},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.10114628076553345},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08211478590965271}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/csnet59123.2023.10339791","doi":"https://doi.org/10.1109/csnet59123.2023.10339791","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csnet59123.2023.10339791","pdf_url":null,"source":{"id":"https://openalex.org/S7407088103","display_name":"Cyber Security in Networking Conference (CSNet)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 7th Cyber Security in Networking Conference (CSNet)","raw_type":"proceedings-article"},{"id":"doi:10.22541/au.170379738.88140454/v1","doi":"https://doi.org/10.22541/au.170379738.88140454/v1","is_oa":true,"landing_page_url":"https://doi.org/10.22541/au.170379738.88140454/v1","pdf_url":"https://www.authorea.com/doi/pdf/10.22541/au.170379738.88140454","source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"posted-content"}],"best_oa_location":{"id":"doi:10.22541/au.170379738.88140454/v1","doi":"https://doi.org/10.22541/au.170379738.88140454/v1","is_oa":true,"landing_page_url":"https://doi.org/10.22541/au.170379738.88140454/v1","pdf_url":"https://www.authorea.com/doi/pdf/10.22541/au.170379738.88140454","source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"posted-content"},"sustainable_development_goals":[{"score":0.4943999946117401,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4389543370.pdf","grobid_xml":"https://content.openalex.org/works/W4389543370.grobid-xml"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W2040340473","https://openalex.org/W2098081907","https://openalex.org/W2139869637","https://openalex.org/W2160218441","https://openalex.org/W2165976789","https://openalex.org/W2490805536","https://openalex.org/W2805697719","https://openalex.org/W2920270798","https://openalex.org/W2982682021","https://openalex.org/W3009009611","https://openalex.org/W3031160330","https://openalex.org/W3031989616","https://openalex.org/W3084346886","https://openalex.org/W3084990221","https://openalex.org/W3113003998","https://openalex.org/W3122385966","https://openalex.org/W3162131400","https://openalex.org/W3173705396","https://openalex.org/W3214071552","https://openalex.org/W4225562555","https://openalex.org/W4281686974","https://openalex.org/W4289530011","https://openalex.org/W4312760756","https://openalex.org/W4312863192","https://openalex.org/W4388186045"],"related_works":["https://openalex.org/W4388186045","https://openalex.org/W4393906152","https://openalex.org/W4400910077","https://openalex.org/W4412742233","https://openalex.org/W4410622420","https://openalex.org/W7155570847","https://openalex.org/W3037176165","https://openalex.org/W7125586788","https://openalex.org/W4389246563","https://openalex.org/W4385864049"],"abstract_inverted_index":{"Software":[0],"Defined":[1],"Networks":[2],"(SDN)":[3],"provide":[4],"rapid":[5],"configuration,":[6],"scalability,":[7],"and":[8,33,39,72,134,139],"management":[9],"through":[10],"a":[11,115],"dynamic,":[12],"programmable":[13],"architecture":[14],"that":[15,68],"surpasses":[16],"traditional":[17,32],"network":[18,124],"limitations.":[19],"However,":[20],"detecting":[21,138],"Distributed":[22],"Denial":[23],"of":[24],"Service":[25],"(DDoS)":[26],"attacks":[27,67],"remains":[28],"challenging,":[29],"threatening":[30],"both":[31],"SDN-based":[34],"networks.":[35],"Machine":[36],"Learning":[37,41],"(ML)":[38],"Deep":[40],"(DL)":[42],"technologies":[43],"in":[44,52],"conjunction":[45],"with":[46],"SDN":[47,104],"have":[48],"shown":[49],"significant":[50],"potential":[51],"effectively":[53,137],"countering":[54],"these":[55],"threats.":[56],"Prior":[57],"studies":[58],"primarily":[59],"addressed":[60],"high-rate":[61],"DDoS":[62,66,86,123,141],"attacks,":[63,87],"neglecting":[64],"low-rate":[65],"resemble":[69],"legitimate":[70],"traffic,":[71,125],"often":[73],"using":[74,106],"outdated":[75],"datasets.":[76],"While":[77],"researchers":[78],"employ":[79],"various":[80],"offline":[81],"learning":[82,89],"algorithms":[83],"to":[84,96,103],"identify":[85],"online":[88,108],"classifiers":[90],"remain":[91],"underexplored.":[92],"Our":[93],"goal":[94],"is":[95],"offer":[97],"an":[98],"intrusion":[99],"detection":[100,118],"model":[101,113],"tailored":[102],"networks,":[105],"the":[107],"passive-aggressive":[109],"classifier.":[110],"The":[111],"proposed":[112],"achieves":[114],"99.7%":[116],"average":[117],"rate":[119],"for":[120],"normal":[121],"vs.":[122],"outperforming":[126],"similar":[127],"models":[128],"on":[129],"multiple":[130],"datasets,":[131],"including":[132],"(CICDDoS2019,":[133],"InSDN.":[135],"slow-read-DDoS),":[136],"mitigating":[140],"attacks.":[142]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":6}],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2023-12-12T00:00:00"}