{"id":"https://openalex.org/W4205510190","doi":"https://doi.org/10.1109/access.2021.3139511","title":"Source-Based Defense Against DDoS Attacks in SDN Based on sFlow and SOM","display_name":"Source-Based Defense Against DDoS Attacks in SDN Based on sFlow and SOM","publication_year":2021,"publication_date":"2021-12-30","ids":{"openalex":"https://openalex.org/W4205510190","doi":"https://doi.org/10.1109/access.2021.3139511"},"language":"en","primary_location":{"id":"doi:10.1109/access.2021.3139511","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3139511","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09665778.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09665778.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091860907","display_name":"Meng Wang","orcid":"https://orcid.org/0000-0003-2874-4573"},"institutions":[{"id":"https://openalex.org/I90610280","display_name":"South China University of Technology","ror":"https://ror.org/0530pts50","country_code":"CN","type":"education","lineage":["https://openalex.org/I90610280"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Meng Wang","raw_affiliation_strings":["School of Electronic and Information Engineering, South China University of Technology, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-2874-4573","affiliations":[{"raw_affiliation_string":"School of Electronic and Information Engineering, South China University of Technology, Guangzhou, China","institution_ids":["https://openalex.org/I90610280"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088104938","display_name":"Yiqin Lu","orcid":"https://orcid.org/0000-0002-5631-6413"},"institutions":[{"id":"https://openalex.org/I90610280","display_name":"South China University of Technology","ror":"https://ror.org/0530pts50","country_code":"CN","type":"education","lineage":["https://openalex.org/I90610280"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yiqin Lu","raw_affiliation_strings":["School of Electronic and Information Engineering, South China University of Technology, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electronic and Information Engineering, South China University of Technology, Guangzhou, China","institution_ids":["https://openalex.org/I90610280"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043385175","display_name":"Jiancheng Qin","orcid":"https://orcid.org/0000-0002-3763-458X"},"institutions":[{"id":"https://openalex.org/I90610280","display_name":"South China University of Technology","ror":"https://ror.org/0530pts50","country_code":"CN","type":"education","lineage":["https://openalex.org/I90610280"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiancheng Qin","raw_affiliation_strings":["School of Electronic and Information Engineering, South China University of Technology, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-3763-458X","affiliations":[{"raw_affiliation_string":"School of Electronic and Information Engineering, South China University of Technology, Guangzhou, China","institution_ids":["https://openalex.org/I90610280"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I90610280"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":2.8865,"has_fulltext":true,"cited_by_count":26,"citation_normalized_percentile":{"value":0.91262872,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"10","issue":null,"first_page":"2097","last_page":"2116"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.92364102602005},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8697832822799683},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.6364994049072266},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5461862683296204},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5423773527145386},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.5132813453674316},{"id":"https://openalex.org/keywords/trinoo","display_name":"Trinoo","score":0.5073561072349548},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.504663348197937},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4878559112548828},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.48362722992897034},{"id":"https://openalex.org/keywords/network-management","display_name":"Network management","score":0.46055376529693604},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4395908713340759},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.34184080362319946}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.92364102602005},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8697832822799683},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.6364994049072266},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5461862683296204},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5423773527145386},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.5132813453674316},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.5073561072349548},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.504663348197937},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4878559112548828},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.48362722992897034},{"id":"https://openalex.org/C129763632","wikidata":"https://www.wikidata.org/wiki/Q1454667","display_name":"Network management","level":2,"score":0.46055376529693604},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4395908713340759},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.34184080362319946},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2021.3139511","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3139511","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09665778.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:79ef4c8a7b63433883b494950ac69628","is_oa":true,"landing_page_url":"https://doaj.org/article/79ef4c8a7b63433883b494950ac69628","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 10, Pp 2097-2116 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2021.3139511","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3139511","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09665778.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4205510190.pdf","grobid_xml":"https://content.openalex.org/works/W4205510190.grobid-xml"},"referenced_works_count":41,"referenced_works":["https://openalex.org/W1583113493","https://openalex.org/W1867219652","https://openalex.org/W1989352541","https://openalex.org/W2000326002","https://openalex.org/W2010947830","https://openalex.org/W2017524370","https://openalex.org/W2031163547","https://openalex.org/W2040340473","https://openalex.org/W2067453331","https://openalex.org/W2088392165","https://openalex.org/W2111958600","https://openalex.org/W2121318675","https://openalex.org/W2122473047","https://openalex.org/W2137345105","https://openalex.org/W2157733102","https://openalex.org/W2159262496","https://openalex.org/W2162969618","https://openalex.org/W2163375756","https://openalex.org/W2170810185","https://openalex.org/W2183397118","https://openalex.org/W2254691854","https://openalex.org/W2276629685","https://openalex.org/W2413213184","https://openalex.org/W2485176934","https://openalex.org/W2497362092","https://openalex.org/W2520828829","https://openalex.org/W2552631155","https://openalex.org/W2584217814","https://openalex.org/W2742447634","https://openalex.org/W2766235013","https://openalex.org/W2768696376","https://openalex.org/W2798785803","https://openalex.org/W2889592383","https://openalex.org/W2912768260","https://openalex.org/W2979998718","https://openalex.org/W2980416117","https://openalex.org/W3008535060","https://openalex.org/W3010924008","https://openalex.org/W3036012999","https://openalex.org/W3042433202","https://openalex.org/W3081430061"],"related_works":["https://openalex.org/W2783466926","https://openalex.org/W2001331025","https://openalex.org/W4286539397","https://openalex.org/W2204131204","https://openalex.org/W2292210693","https://openalex.org/W2887235364","https://openalex.org/W2063104870","https://openalex.org/W3132742126","https://openalex.org/W2097156747","https://openalex.org/W2942864670"],"abstract_inverted_index":{"In":[0,123],"the":[1,8,13,32,46,58,63,152,167,176,181,195,198],"traditional":[2],"distributed":[3],"control":[4,119],"network,":[5],"due":[6],"to":[7,23,83,112,155,165],"difficulty":[9],"in":[10,31,66,140],"detection":[11,207],"and":[12,21,55,62,110,120,134,170,189,201,211],"ambiguous":[14],"defense":[15,42,97,129],"responsibility,":[16],"it":[17,202],"is":[18,39,91,163],"not":[19],"efficient":[20],"effective":[22],"detect":[24],"Distributed":[25],"Denial":[26],"of":[27,48,52,60,145,197],"Service":[28],"(DDoS)":[29],"attacks":[30],"network":[33,121,154],"where":[34],"they":[35],"are":[36],"launched,":[37],"which":[38,149,162],"so-called":[40],"source-based":[41,96],"mechanism.":[43],"Moreover,":[44],"with":[45],"development":[47],"cloud":[49],"computing,":[50],"Internet":[51],"Things":[53],"(IoT),":[54],"mobile":[56],"Internet,":[57],"number":[59],"terminals":[61],"communication":[64],"bandwidth":[65],"a":[67,85,128,159,171],"single":[68],"autonomous":[69],"domain":[70],"have":[71,193],"increased":[72],"significantly,":[73],"providing":[74],"much":[75],"more":[76],"easy":[77],"conditions":[78],"for":[79,95],"organizing":[80],"large-scale":[81],"botnets":[82],"launch":[84],"threatening":[86],"DDoS":[87,99,157],"attack.":[88],"Therefore,":[89],"there":[90],"an":[92,146],"urgent":[93],"need":[94],"against":[98],"attacks.":[100],"The":[101,183],"emerging":[102],"Software-Defined":[103],"Networking":[104],"(SDN)":[105],"provides":[106],"some":[107],"new":[108],"ideas":[109],"advantages":[111],"solve":[113],"this":[114,124],"problem,":[115],"such":[116],"as":[117],"centralized":[118],"programmability.":[122],"paper,":[125],"we":[126],"proposed":[127,199],"method":[130,143],"based":[131,174],"on":[132,175],"sFlow":[133],"improved":[135],"Self-Organizing":[136],"Map":[137],"(SOM)":[138],"model":[139],"SDN.":[141],"This":[142],"consists":[144],"sFlow-based":[147],"macro-detection,":[148],"could":[150],"cover":[151],"entire":[153],"perceive":[156],"attacks,":[158],"SOM-based":[160],"micro-detection,":[161],"used":[164],"recognize":[166],"attack":[168,191],"traffic,":[169],"response":[172],"strategy":[173],"global":[177],"view":[178],"given":[179],"by":[180],"controller.":[182],"experimental":[184],"results":[185],"under":[186],"open":[187],"data":[188],"simulated":[190],"scenarios":[192],"proved":[194],"effectiveness":[196],"method,":[200],"also":[203],"has":[204],"better":[205],"overall":[206],"performance":[208],"than":[209],"k-means":[210],"k-medoids.":[212]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":5}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}