{"id":"https://openalex.org/W3191493850","doi":"https://doi.org/10.1109/access.2021.3101650","title":"SDN-Based Architecture for Transport and Application Layer DDoS Attack Detection by Using Machine and Deep Learning","display_name":"SDN-Based Architecture for Transport and Application Layer DDoS Attack Detection by Using Machine and Deep Learning","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3191493850","doi":"https://doi.org/10.1109/access.2021.3101650","mag":"3191493850"},"language":"en","primary_location":{"id":"doi:10.1109/access.2021.3101650","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3101650","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09502698.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09502698.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089152522","display_name":"Noe M. Yungaicela-Naula","orcid":"https://orcid.org/0000-0002-3131-0672"},"institutions":[{"id":"https://openalex.org/I98461037","display_name":"Tecnol\u00f3gico de Monterrey","ror":"https://ror.org/03ayjn504","country_code":"MX","type":"education","lineage":["https://openalex.org/I98461037"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Noe Marcelo Yungaicela-Naula","raw_affiliation_strings":["School of Engineering and Sciences, Tecnologico de Monterrey, Monterrey, Mexico"],"raw_orcid":"https://orcid.org/0000-0002-3131-0672","affiliations":[{"raw_affiliation_string":"School of Engineering and Sciences, Tecnologico de Monterrey, Monterrey, Mexico","institution_ids":["https://openalex.org/I98461037"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063457306","display_name":"Cesar Vargas\u2010Rosales","orcid":"https://orcid.org/0000-0003-1770-471X"},"institutions":[{"id":"https://openalex.org/I98461037","display_name":"Tecnol\u00f3gico de Monterrey","ror":"https://ror.org/03ayjn504","country_code":"MX","type":"education","lineage":["https://openalex.org/I98461037"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Cesar Vargas-Rosales","raw_affiliation_strings":["School of Engineering and Sciences, Tecnologico de Monterrey, Monterrey, Mexico"],"raw_orcid":"https://orcid.org/0000-0003-1770-471X","affiliations":[{"raw_affiliation_string":"School of Engineering and Sciences, Tecnologico de Monterrey, Monterrey, Mexico","institution_ids":["https://openalex.org/I98461037"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031091191","display_name":"Jes\u00fas Arturo P\u00e9rez-D\u00edaz","orcid":"https://orcid.org/0000-0002-7678-5487"},"institutions":[{"id":"https://openalex.org/I98461037","display_name":"Tecnol\u00f3gico de Monterrey","ror":"https://ror.org/03ayjn504","country_code":"MX","type":"education","lineage":["https://openalex.org/I98461037"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Jesus Arturo Perez-Diaz","raw_affiliation_strings":["School of Engineering and Sciences, Tecnologico de Monterrey, Monterrey, Mexico"],"raw_orcid":"https://orcid.org/0000-0002-7678-5487","affiliations":[{"raw_affiliation_string":"School of Engineering and Sciences, Tecnologico de Monterrey, Monterrey, Mexico","institution_ids":["https://openalex.org/I98461037"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I98461037"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":22.0059,"has_fulltext":true,"cited_by_count":203,"citation_normalized_percentile":{"value":0.99748307,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":100},"biblio":{"volume":"9","issue":null,"first_page":"108495","last_page":"108512"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.9299265146255493},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8605644702911377},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.6432857513427734},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.6075255870819092},{"id":"https://openalex.org/keywords/application-layer","display_name":"Application layer","score":0.5295321345329285},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5018091201782227},{"id":"https://openalex.org/keywords/transport-layer","display_name":"Transport layer","score":0.4513598084449768},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4366072714328766},{"id":"https://openalex.org/keywords/network-architecture","display_name":"Network architecture","score":0.42732226848602295},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4253847002983093},{"id":"https://openalex.org/keywords/trinoo","display_name":"Trinoo","score":0.41002869606018066},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3852486312389374},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.38320639729499817},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.33350110054016113},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.2823401093482971},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1707857847213745}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.9299265146255493},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8605644702911377},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.6432857513427734},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.6075255870819092},{"id":"https://openalex.org/C190793597","wikidata":"https://www.wikidata.org/wiki/Q189768","display_name":"Application layer","level":3,"score":0.5295321345329285},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5018091201782227},{"id":"https://openalex.org/C7345512","wikidata":"https://www.wikidata.org/wiki/Q209372","display_name":"Transport layer","level":3,"score":0.4513598084449768},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4366072714328766},{"id":"https://openalex.org/C193415008","wikidata":"https://www.wikidata.org/wiki/Q639681","display_name":"Network architecture","level":2,"score":0.42732226848602295},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4253847002983093},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.41002869606018066},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3852486312389374},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38320639729499817},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.33350110054016113},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2823401093482971},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1707857847213745},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2021.3101650","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3101650","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09502698.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:da44114cb82a46fc96176341d3331c23","is_oa":true,"landing_page_url":"https://doaj.org/article/da44114cb82a46fc96176341d3331c23","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 9, Pp 108495-108512 (2021)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2021.3101650","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3101650","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09502698.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals","score":0.41999998688697815}],"awards":[{"id":"https://openalex.org/G3711256975","display_name":null,"funder_award_id":"519RT0580","funder_id":"https://openalex.org/F4320325124","funder_display_name":"CYTED Ciencia y Tecnolog\u00eda para el Desarrollo"}],"funders":[{"id":"https://openalex.org/F4320308590","display_name":"University of California","ror":"https://ror.org/00pjdza24"},{"id":"https://openalex.org/F4320310677","display_name":"University of Texas at San Antonio","ror":"https://ror.org/01kd65564"},{"id":"https://openalex.org/F4320310688","display_name":"Center for Information Technology Research in the Interest of Society","ror":"https://ror.org/00zv0wd17"},{"id":"https://openalex.org/F4320315033","display_name":"Banatao Institute","ror":null},{"id":"https://openalex.org/F4320323037","display_name":"Instituto Tecnol\u00f3gico y de Estudios Superiores de Monterrey","ror":"https://ror.org/03ayjn504"},{"id":"https://openalex.org/F4320325124","display_name":"CYTED Ciencia y Tecnolog\u00eda para el Desarrollo","ror":"https://ror.org/03myqtf56"},{"id":"https://openalex.org/F4320337373","display_name":"Center for Information Technology","ror":"https://ror.org/03jh5a977"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3191493850.pdf","grobid_xml":"https://content.openalex.org/works/W3191493850.grobid-xml"},"referenced_works_count":41,"referenced_works":["https://openalex.org/W569303333","https://openalex.org/W1985609408","https://openalex.org/W2587078433","https://openalex.org/W2591712613","https://openalex.org/W2597472767","https://openalex.org/W2782735691","https://openalex.org/W2787944753","https://openalex.org/W2799843691","https://openalex.org/W2807319534","https://openalex.org/W2892142441","https://openalex.org/W2936630130","https://openalex.org/W2938258273","https://openalex.org/W2941828467","https://openalex.org/W2956030019","https://openalex.org/W2959627510","https://openalex.org/W2968015832","https://openalex.org/W2969965567","https://openalex.org/W2982682021","https://openalex.org/W2994839885","https://openalex.org/W3004079980","https://openalex.org/W3006165800","https://openalex.org/W3008535060","https://openalex.org/W3010220852","https://openalex.org/W3010471324","https://openalex.org/W3010527934","https://openalex.org/W3012454270","https://openalex.org/W3015562211","https://openalex.org/W3021973688","https://openalex.org/W3024476475","https://openalex.org/W3081430061","https://openalex.org/W3082527254","https://openalex.org/W3091945716","https://openalex.org/W3093242351","https://openalex.org/W3114263020","https://openalex.org/W3116430685","https://openalex.org/W3155650995","https://openalex.org/W4210878699","https://openalex.org/W4238294603","https://openalex.org/W4240505729","https://openalex.org/W6766875896","https://openalex.org/W6788199172"],"related_works":["https://openalex.org/W2887235364","https://openalex.org/W2754163055","https://openalex.org/W2908108831","https://openalex.org/W2784282778","https://openalex.org/W3005836778","https://openalex.org/W2340488574","https://openalex.org/W2161084684","https://openalex.org/W2942864670","https://openalex.org/W2375951120","https://openalex.org/W4254515188"],"abstract_inverted_index":{"Distributed":[0],"Denial":[1],"of":[2,23,79,114],"Service":[3],"(DDoS)":[4],"attacks":[5,12,37,56,128,218],"represent":[6],"the":[7,21,88,104,112,159,191,196],"most":[8,78],"common":[9],"and":[10,15,28,65,117,124,134,155,169,172,195,219],"critical":[11],"targeting":[13],"conventional":[14],"new":[16],"generation":[17],"networks,":[18],"such":[19],"as":[20],"Internet":[22],"Things":[24],"(IoT),":[25],"cloud":[26],"computing,":[27],"fifth-generation":[29],"(5G)":[30],"communication":[31],"networks.":[32,108],"In":[33,204],"recent":[34],"years,":[35],"DDoS":[36,76,127,217,225],"have":[38,72],"become":[39],"not":[40,82],"only":[41,92],"massive":[42],"but":[43],"also":[44,185],"sophisticated.":[45],"Software-Defined":[46],"Networking":[47],"(SDN)":[48],"technology":[49],"has":[50],"demonstrated":[51,209],"effectiveness":[52],"in":[53],"counter-measuring":[54],"complex":[55],"since":[57],"it":[58],"provides":[59],"flexibility":[60],"on":[61,178],"global":[62],"network":[63,67,192],"monitoring":[64],"inline":[66],"configuration.":[68],"Although":[69],"several":[70],"works":[71,96],"proposed":[73],"to":[74,106,121,145,221],"detect":[75,122],"attacks,":[77],"them":[80],"did":[81],"use":[83],"up-to-date":[84,164],"datasets":[85],"that":[86],"contain":[87],"newest":[89],"threats.":[90],"Furthermore,":[91],"a":[93,115,187],"few":[94],"previous":[95],"assessed":[97],"their":[98],"solutions":[99],"using":[100,129,162,190],"simulated":[101,188],"scenarios,":[102],"easing":[103],"migration":[105],"production":[107],"This":[109],"document":[110],"presents":[111],"implementation":[113],"modular":[116],"flexible":[118],"SDN-based":[119],"architecture":[120],"transport":[123,216],"application":[125],"layer":[126],"multiple":[130],"Machine":[131],"Learning":[132,136],"(ML)":[133],"Deep":[135],"(DL)":[137],"models.":[138],"Exploring":[139],"diverse":[140],"ML/DL":[141,160],"methods":[142,148],"allowed":[143],"us":[144],"resolve":[146],"which":[147],"perform":[149],"better":[150],"under":[151],"different":[152],"attack":[153],"types":[154],"conditions.":[156],"We":[157,184],"tested":[158],"models":[161],"two":[163],"security":[165],"datasets,":[166,171],"namely":[167],"CICDoS2017":[168],"CICDDoS2019":[170],"they":[173],"showed":[174],"accuracy":[175],"above":[176,213],"99%":[177],"classifying":[179],"unseen":[180],"traffic":[181],"(testing":[182],"set).":[183],"deployed":[186],"environment":[189],"emulator":[193],"Mininet":[194],"Open":[197],"Network":[198],"Operating":[199],"System":[200],"(ONOS)":[201],"SDN":[202],"controller.":[203],"this":[205],"experimental":[206],"setup,":[207],"we":[208],"high":[210],"detection":[211],"rates,":[212],"98%":[214],"for":[215,223],"up":[220],"95%":[222],"application-layer":[224],"attacks.":[226]},"counts_by_year":[{"year":2026,"cited_by_count":19},{"year":2025,"cited_by_count":39},{"year":2024,"cited_by_count":60},{"year":2023,"cited_by_count":57},{"year":2022,"cited_by_count":26},{"year":2021,"cited_by_count":2}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}