{"id":"https://openalex.org/W4412880828","doi":"https://doi.org/10.62951/ijies.v2i2.292","title":"Hybrid CNN GRU Framework for Early Detection and Adaptive Mitigation of DDoS Attacks in SDN using Image Based Traffic Analysis","display_name":"Hybrid CNN GRU Framework for Early Detection and Adaptive Mitigation of DDoS Attacks in SDN using Image Based Traffic Analysis","publication_year":2025,"publication_date":"2025-05-30","ids":{"openalex":"https://openalex.org/W4412880828","doi":"https://doi.org/10.62951/ijies.v2i2.292"},"language":"en","primary_location":{"id":"doi:10.62951/ijies.v2i2.292","doi":"https://doi.org/10.62951/ijies.v2i2.292","is_oa":true,"landing_page_url":"https://doi.org/10.62951/ijies.v2i2.292","pdf_url":"https://international.arteii.or.id/index.php/IJIES/article/download/292/139","source":{"id":"https://openalex.org/S5407046969","display_name":"International Journal of Information Engineering and Science","issn_l":"3048-1902","issn":["3048-1902","3048-1953"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Engineering and Science","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://international.arteii.or.id/index.php/IJIES/article/download/292/139","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5056338017","display_name":"Danang Danang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4387153296","display_name":"Universitas Sains dan Teknologi Komputer","ror":"https://ror.org/05tqmmk50","country_code":"ID","type":"education","lineage":["https://openalex.org/I4387153296"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Danang Danang","raw_affiliation_strings":["University of Computer Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Computer Science and Technology","institution_ids":["https://openalex.org/I4387153296"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014415079","display_name":"Indra Ava Dianta","orcid":"https://orcid.org/0000-0002-9605-2360","observed_orcids":["https://orcid.org/0000-0002-9605-2360"]},"institutions":[{"id":"https://openalex.org/I4387153296","display_name":"Universitas Sains dan Teknologi Komputer","ror":"https://ror.org/05tqmmk50","country_code":"ID","type":"education","lineage":["https://openalex.org/I4387153296"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Indra Ava Dianta","raw_affiliation_strings":["University of Computer Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Computer Science and Technology","institution_ids":["https://openalex.org/I4387153296"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025509973","display_name":"Agustinus Budi Santoso","orcid":"https://orcid.org/0009-0005-1895-7657","observed_orcids":["https://orcid.org/0009-0005-1895-7657"]},"institutions":[{"id":"https://openalex.org/I4387153296","display_name":"Universitas Sains dan Teknologi Komputer","ror":"https://ror.org/05tqmmk50","country_code":"ID","type":"education","lineage":["https://openalex.org/I4387153296"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Agustinus Budi Santoso","raw_affiliation_strings":["University of Computer Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Computer Science and Technology","institution_ids":["https://openalex.org/I4387153296"]}]},{"author_position":"last","author":{"id":null,"display_name":"Siti Kholifah","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Siti Kholifah","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.0341,"has_fulltext":true,"cited_by_count":10,"citation_normalized_percentile":{"value":0.91251168,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"2","issue":"3","first_page":"22","last_page":"31"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.0013000000035390258,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ddos-detection","display_name":"DDoS attack detection","score":0.9710000157356262},{"id":"https://openalex.org/keywords/ddos-mitigation","display_name":"DDoS mitigation","score":0.9369999766349792},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"software-defined networking","score":0.9589999914169312},{"id":"https://openalex.org/keywords/convolutional-neural-networks","display_name":"convolutional neural networks","score":0.7649999856948853},{"id":"https://openalex.org/keywords/gated-recurrent-unit","display_name":"gated recurrent unit","score":0.9980000257492065},{"id":"https://openalex.org/keywords/traffic-flow-classification","display_name":"traffic flow classification","score":0.36500000953674316},{"id":"https://openalex.org/keywords/edge-switches","display_name":"edge switches","score":0.6690000295639038},{"id":"https://openalex.org/keywords/mininet","display_name":"Mininet","score":0.4490000009536743}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.855968177318573},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6312574148178101},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41422390937805176},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4103461802005768},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3865133225917816},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3339686989784241},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.11419051885604858},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.06765538454055786}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.62951/ijies.v2i2.292","doi":"https://doi.org/10.62951/ijies.v2i2.292","is_oa":true,"landing_page_url":"https://doi.org/10.62951/ijies.v2i2.292","pdf_url":"https://international.arteii.or.id/index.php/IJIES/article/download/292/139","source":{"id":"https://openalex.org/S5407046969","display_name":"International Journal of Information Engineering and Science","issn_l":"3048-1902","issn":["3048-1902","3048-1953"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Engineering and Science","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.62951/ijies.v2i2.292","doi":"https://doi.org/10.62951/ijies.v2i2.292","is_oa":true,"landing_page_url":"https://doi.org/10.62951/ijies.v2i2.292","pdf_url":"https://international.arteii.or.id/index.php/IJIES/article/download/292/139","source":{"id":"https://openalex.org/S5407046969","display_name":"International Journal of Information Engineering and Science","issn_l":"3048-1902","issn":["3048-1902","3048-1953"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Engineering and Science","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412880828.pdf","grobid_xml":"https://content.openalex.org/works/W4412880828.grobid-xml"},"referenced_works_count":12,"referenced_works":["https://openalex.org/W2110485445","https://openalex.org/W2892629682","https://openalex.org/W2976189582","https://openalex.org/W2982682021","https://openalex.org/W3001601968","https://openalex.org/W3117819143","https://openalex.org/W3118694803","https://openalex.org/W3119090993","https://openalex.org/W3133975858","https://openalex.org/W4200206556","https://openalex.org/W4361293176","https://openalex.org/W4399094293"],"related_works":["https://openalex.org/W7203781989","https://openalex.org/W7196933363","https://openalex.org/W4393059310","https://openalex.org/W7165879047","https://openalex.org/W7172520564","https://openalex.org/W4387542030","https://openalex.org/W4307482755","https://openalex.org/W7128481023","https://openalex.org/W4386030260","https://openalex.org/W4409173658"],"abstract_inverted_index":{"The":[0],"threat":[1],"of":[2,5,15,18],"Distributed":[3],"Denial":[4],"Service":[6],"(DDoS)":[7],"is":[8],"increasing":[9,13],"develop":[10],"along":[11],"with":[12,134,173],"use":[14],"the":[16,184,214],"Internet":[17],"Things":[19],"(IoT)":[20],"and":[21,60,75,97,112,143,164,180,208,244,252],"Software-Defined":[22],"Networking":[23],"(SDN)":[24],"architecture":[25],".":[26,51,81,126,170],"Although":[27],"SDN":[28,249],"provides":[29],"convenience":[30],"in":[31,66,154,240],"management":[32],"network":[33,125,130],",":[34,55,69,74,86,176,213],"properties":[35],"its":[36],"centralized":[37],"control":[38],"make":[39],"it":[40],"prone":[41],"to":[42,43,106,192],"flooding":[44],"attacks":[45,140,247],"that":[46,100,183,231],"can":[47],"paralyze":[48],"controller":[49],"performance":[50,188],"Detection":[52],"method":[53],"conventional":[54],"such":[56,195,205],"as":[57,196,199,201,206],"approach":[58,239],"statistics":[59],"machine":[61],"learning,":[62],"still":[63],"own":[64],"limitations":[65],"matter":[67],"accuracy":[68,175],"high":[70],"false":[71],"positive":[72],"rate":[73],"dependence":[76],"on":[77,167,225,248],"extracted":[78],"features":[79],"manually":[80],"To":[82],"overcome":[83],"problem":[84],"said":[85],"research":[87],"This":[88,229],"propose":[89],"a":[90],"hybrid":[91,238],"deep":[92,233],"learning":[93],"based":[94,133,166,235],"DDoS":[95,139,246],"detection":[96,242],"mitigation":[98,218],"model":[99,186],"combines":[101],"Convolutional":[102],"Neural":[103],"Network":[104],"(CNN)":[105],"extraction":[107],"feature":[108],"spatial":[109,236],"from":[110],"RGB":[111,159],"Gated":[113],"Recurrent":[114],"Unit":[115],"(GRU)":[116],"images":[117],"for":[118],"understand":[119],"temporal":[120],"correlation":[121],"between":[122],"traffic":[123,145,169],"data":[124,151],"System":[127],"tested":[128],"through":[129,220],"test-bed":[131],"Mininet":[132],"Ryu/Floodlight":[135],"controller,":[136],"using":[137],"simulation":[138],"(Hping3,":[141],"LOIC)":[142],"normal":[144],"(video":[146],"streaming,":[147],"HTTP":[148],"server).":[149],"Traffic":[150],"cross":[152],"recorded":[153],"PCAP":[155],"format,":[156],"processed":[157],"become":[158],"image":[160],"measuring":[161],"200\u00d7200":[162],"pixels,":[163],"labeled":[165],"type":[168],"Evaluation":[171],"results":[172],"metric":[174],"precision,":[177],"recall,":[178],"F1-score,":[179],"MCC":[181],"show":[182],"CNN\u2013GRU":[185],"has":[187],"more":[189],"superior":[190],"compared":[191],"baseline":[193],"approaches":[194],"CNN-only,":[197],"GRU-only,":[198],"well":[200],"classical":[202],"ML":[203],"methods":[204],"SVM":[207],"Random":[209],"Forest.":[210],"In":[211],"addition":[212],"system":[215],"capable":[216],"apply":[217],"adaptive":[219,251],"automatic":[221],"flow":[222],"rule":[223],"creation":[224],"edge":[226],"switches.":[227],"Findings":[228],"confirm":[230],"effective":[232],"learning-":[234],"-temporal":[237],"increase":[241],"early":[243],"response":[245],"networks":[250],"real-time.":[253]},"counts_by_year":[{"year":2026,"cited_by_count":10}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2025-10-10T00:00:00"}