{"id":"https://openalex.org/W4403721765","doi":"https://doi.org/10.1109/access.2024.3486034","title":"Detecting DDoS Threats Using Supervised Machine Learning for Traffic Classification in Software Defined Networking","display_name":"Detecting DDoS Threats Using Supervised Machine Learning for Traffic Classification in Software Defined Networking","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4403721765","doi":"https://doi.org/10.1109/access.2024.3486034"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3486034","doi":"https://doi.org/10.1109/access.2024.3486034","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3486034","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2024.3486034","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049356639","display_name":"Abdinasir Hirsi","orcid":"https://orcid.org/0000-0001-8543-6134","observed_orcids":["https://orcid.org/0000-0001-8543-6134"]},"institutions":[{"id":"https://openalex.org/I930072361","display_name":"Tun Hussein Onn University of Malaysia","ror":"https://ror.org/01c5wha71","country_code":"MY","type":"education","lineage":["https://openalex.org/I930072361"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Abdinasir Hirsi","raw_affiliation_strings":["Advanced Telecommunication Research Center (ATRC), Faculty of Electrical and Electronic Engineering, Universiti Tun Hussein Onn Malaysia, Parit Raja, Malaysia"],"raw_orcid":"https://orcid.org/0000-0001-8543-6134","affiliations":[{"raw_affiliation_string":"Advanced Telecommunication Research Center (ATRC), Faculty of Electrical and Electronic Engineering, Universiti Tun Hussein Onn Malaysia, Parit Raja, Malaysia","institution_ids":["https://openalex.org/I930072361"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066783464","display_name":"Lukman Audah","orcid":"https://orcid.org/0000-0002-0958-4474","observed_orcids":["https://orcid.org/0000-0002-0958-4474"]},"institutions":[{"id":"https://openalex.org/I930072361","display_name":"Tun Hussein Onn University of Malaysia","ror":"https://ror.org/01c5wha71","country_code":"MY","type":"education","lineage":["https://openalex.org/I930072361"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Lukman Audah","raw_affiliation_strings":["Advanced Telecommunication Research Center (ATRC), Faculty of Electrical and Electronic Engineering, Universiti Tun Hussein Onn Malaysia, Parit Raja, Malaysia"],"raw_orcid":"https://orcid.org/0000-0002-0958-4474","affiliations":[{"raw_affiliation_string":"Advanced Telecommunication Research Center (ATRC), Faculty of Electrical and Electronic Engineering, Universiti Tun Hussein Onn Malaysia, Parit Raja, Malaysia","institution_ids":["https://openalex.org/I930072361"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109514967","display_name":"Adeb Salh","orcid":"https://orcid.org/0000-0001-8880-6153","observed_orcids":["https://orcid.org/0000-0001-8880-6153"]},"institutions":[{"id":"https://openalex.org/I931681460","display_name":"Universiti Tunku Abdul Rahman","ror":"https://ror.org/050pq4m56","country_code":"MY","type":"education","lineage":["https://openalex.org/I931681460"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Adeb Salh","raw_affiliation_strings":["Faculty of Information and Communication Technology, University Tunku Abdul Rahman (UTAR), Kampar, Malaysia"],"raw_orcid":"https://orcid.org/0000-0001-8880-6153","affiliations":[{"raw_affiliation_string":"Faculty of Information and Communication Technology, University Tunku Abdul Rahman (UTAR), Kampar, Malaysia","institution_ids":["https://openalex.org/I931681460"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039678928","display_name":"Mohammed A. Alhartomi","orcid":"https://orcid.org/0000-0002-5955-8864","observed_orcids":["https://orcid.org/0000-0002-5955-8864"]},"institutions":[{"id":"https://openalex.org/I72264486","display_name":"University of Tabuk","ror":"https://ror.org/04yej8x59","country_code":"SA","type":"education","lineage":["https://openalex.org/I72264486"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mohammed A. Alhartomi","raw_affiliation_strings":["Department of Electrical Engineering, University of Tabuk, Tabuk, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-5955-8864","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering, University of Tabuk, Tabuk, Saudi Arabia","institution_ids":["https://openalex.org/I72264486"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103637470","display_name":"Salman Ahmed","orcid":"https://orcid.org/0009-0003-7129-7892","observed_orcids":["https://orcid.org/0009-0003-7129-7892"]},"institutions":[{"id":"https://openalex.org/I930072361","display_name":"Tun Hussein Onn University of Malaysia","ror":"https://ror.org/01c5wha71","country_code":"MY","type":"education","lineage":["https://openalex.org/I930072361"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Salman Ahmed","raw_affiliation_strings":["VLSI and Embedded Technology (VEST) Focus Group, Faculty of Electrical and Electronic Engineering, Universiti Tun Hussein Onn Malaysia, Parit Raja, Malaysia"],"raw_orcid":"https://orcid.org/0009-0003-7129-7892","affiliations":[{"raw_affiliation_string":"VLSI and Embedded Technology (VEST) Focus Group, Faculty of Electrical and Electronic Engineering, Universiti Tun Hussein Onn Malaysia, Parit Raja, Malaysia","institution_ids":["https://openalex.org/I930072361"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1995,"currency":"USD","value_usd":1995},"apc_paid":{"value":1995,"currency":"USD","value_usd":1995},"fwci":11.6381,"has_fulltext":false,"cited_by_count":90,"citation_normalized_percentile":{"value":0.99141343,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":100},"biblio":{"volume":"12","issue":null,"first_page":"166675","last_page":"166702"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.0020000000949949026,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.0007999999797903001,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ddos-detection","display_name":"DDoS attack detection","score":0.984000027179718},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"software-defined networking","score":0.8899999856948853},{"id":"https://openalex.org/keywords/network-traffic-classification","display_name":"network traffic classification","score":0.8830000162124634},{"id":"https://openalex.org/keywords/malicious-traffic-detection","display_name":"malicious traffic detection","score":0.7379999756813049},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"anomaly detection","score":0.6830000281333923},{"id":"https://openalex.org/keywords/cicddos2019","display_name":"CICDDoS2019","score":0.8889999985694885},{"id":"https://openalex.org/keywords/random-forest","display_name":"random forest","score":0.9480000138282776},{"id":"https://openalex.org/keywords/false-alarm-rate","display_name":"false alarm rate","score":0.8479999899864197},{"id":"https://openalex.org/keywords/network-security","display_name":"network security","score":0.8500000238418579}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8513405323028564},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8438653945922852},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.6521637439727783},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.5247693061828613},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.48243841528892517},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4294179081916809},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.42921558022499084},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4045352637767792},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3593178391456604},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.20683428645133972},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.20470526814460754},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.15177497267723083},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.10113433003425598}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2024.3486034","doi":"https://doi.org/10.1109/access.2024.3486034","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3486034","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:d5291bcbeb064582b0fd517415e4e835","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/d5291bcbeb064582b0fd517415e4e835","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 166675-166702 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3486034","doi":"https://doi.org/10.1109/access.2024.3486034","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3486034","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5378999710083008,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321709","display_name":"Ministry of Higher Education, Malaysia","ror":"https://ror.org/05mcs2t73"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W2215773676","https://openalex.org/W2335786871","https://openalex.org/W2550252820","https://openalex.org/W2912536826","https://openalex.org/W2970145645","https://openalex.org/W2982682021","https://openalex.org/W2998008813","https://openalex.org/W3000572988","https://openalex.org/W3010060180","https://openalex.org/W3011254944","https://openalex.org/W3032948302","https://openalex.org/W3042433202","https://openalex.org/W3042570465","https://openalex.org/W3081430061","https://openalex.org/W3083616926","https://openalex.org/W3095464235","https://openalex.org/W3103015763","https://openalex.org/W3112732217","https://openalex.org/W3132301129","https://openalex.org/W3140673104","https://openalex.org/W3144411758","https://openalex.org/W3159238871","https://openalex.org/W3163792154","https://openalex.org/W3194351053","https://openalex.org/W3196634043","https://openalex.org/W3200241357","https://openalex.org/W4206558373","https://openalex.org/W4206814597","https://openalex.org/W4210342233","https://openalex.org/W4211260987","https://openalex.org/W4224109614","https://openalex.org/W4281615114","https://openalex.org/W4281641933","https://openalex.org/W4290717392","https://openalex.org/W4293690835","https://openalex.org/W4308424950","https://openalex.org/W4309263378","https://openalex.org/W4313306321","https://openalex.org/W4360584536","https://openalex.org/W4377691173","https://openalex.org/W4385078968","https://openalex.org/W4385412977","https://openalex.org/W4386065491","https://openalex.org/W4387914235","https://openalex.org/W4390586242","https://openalex.org/W4391343063","https://openalex.org/W4393859539","https://openalex.org/W4394829930"],"related_works":["https://openalex.org/W4404963974","https://openalex.org/W7162628487","https://openalex.org/W4390514309","https://openalex.org/W4378420361","https://openalex.org/W7125586788","https://openalex.org/W4386025035","https://openalex.org/W4388223810","https://openalex.org/W3161554626","https://openalex.org/W4385864049","https://openalex.org/W4408592258"],"abstract_inverted_index":{"Software-Defined":[0],"Networking":[1],"(SDN)":[2],"is":[3],"a":[4,58,81,150,156],"promising":[5],"solution":[6],"for":[7,15,50,61,85,123,129,187],"large-scale":[8],"network":[9,174],"management":[10],"that":[11,67],"offers":[12],"extensive":[13],"opportunities":[14],"optimization.":[16],"However,":[17],"the":[18,90,106,110,115,141,144,167,185],"centralized":[19],"control":[20],"inherent":[21],"in":[22,135,172,181,190],"SDN":[23,65,136,182],"also":[24],"exposes":[25],"networks":[26],"to":[27],"security":[28,175],"threats,":[29],"notably":[30],"Distributed":[31],"Denial":[32],"of":[33,92,101,114,143,153,162,169],"Service":[34],"(DDoS)":[35],"attacks.":[36],"To":[37],"address":[38],"these":[39],"challenges,":[40],"machine":[41],"learning":[42],"(ML)":[43],"techniques":[44],"have":[45],"emerged":[46],"as":[47,96],"potent":[48],"tools":[49],"anomaly":[51],"detection":[52],"and":[53,71,99,112,131,155,176],"mitigation.":[54],"This":[55,78,118],"paper":[56],"proposes":[57],"novel":[59],"approach":[60],"traffic":[62,73],"classification":[63],"within":[64],"environments":[66],"distinguishes":[68],"between":[69],"benign":[70],"malicious":[72],"using":[74],"supervised":[75],"ML":[76],"techniques.":[77],"study":[79],"introduces":[80],"unique":[82],"dataset":[83,108],"tailored":[84],"DDoS":[86,133,179],"attack":[87],"detection,":[88],"overcoming":[89],"limitations":[91],"existing":[93],"datasets,":[94],"such":[95],"unrealistic":[97],"topologies":[98],"lack":[100],"public":[102],"availability.":[103],"Benchmarking":[104],"against":[105,178],"CICDDoS2019":[107],"validated":[109],"efficacy":[111],"relevance":[113],"custom":[116],"dataset.":[117],"research":[119],"has":[120],"significant":[121],"implications":[122],"real-world":[124],"applications,":[125],"offering":[126],"improved":[127],"capabilities":[128],"detecting":[130],"mitigating":[132],"attacks":[134,180],"infrastructure.":[137],"Experimental":[138],"results":[139],"demonstrated":[140],"effectiveness":[142],"proposed":[145],"random":[146],"forest":[147],"model,":[148],"achieving":[149],"remarkable":[151],"accuracy":[152],"98.97%":[154],"minimal":[157],"False":[158],"Alarm":[159],"Rate":[160],"(FAR)":[161],"0.023.":[163],"These":[164],"findings":[165],"underscore":[166],"potential":[168],"ML-based":[170],"approaches":[171],"enhancing":[173],"resilience":[177],"environments,":[183],"paving":[184],"way":[186],"future":[188],"advancements":[189],"network-defense":[191],"strategies.":[192]},"counts_by_year":[{"year":2026,"cited_by_count":42},{"year":2025,"cited_by_count":47},{"year":2024,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2024-10-25T00:00:00"}