{"id":"https://openalex.org/W4411725548","doi":"https://doi.org/10.1109/access.2025.3583712","title":"HSF: A Hybrid SVM-RF Machine Learning Framework for Dual-Plane DDoS Detection and Mitigation in Software-Defined Networks","display_name":"HSF: A Hybrid SVM-RF Machine Learning Framework for Dual-Plane DDoS Detection and Mitigation in Software-Defined Networks","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4411725548","doi":"https://doi.org/10.1109/access.2025.3583712"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3583712","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3583712","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3583712","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049356639","display_name":"Abdinasir Hirsi","orcid":"https://orcid.org/0000-0001-8543-6134"},"institutions":[{"id":"https://openalex.org/I930072361","display_name":"Tun Hussein Onn University of Malaysia","ror":"https://ror.org/01c5wha71","country_code":"MY","type":"education","lineage":["https://openalex.org/I930072361"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Abdinasir Hirsi","raw_affiliation_strings":["Advanced Telecommunication Research Center, Faculty of Electrical and Electronic Engineering, Universiti Tun Hussein Onn Malaysia (UTHM), Parit Raja, Malaysia"],"raw_orcid":"https://orcid.org/0000-0001-8543-6134","affiliations":[{"raw_affiliation_string":"Advanced Telecommunication Research Center, Faculty of Electrical and Electronic Engineering, Universiti Tun Hussein Onn Malaysia (UTHM), Parit Raja, Malaysia","institution_ids":["https://openalex.org/I930072361"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066783464","display_name":"Lukman Audah\u200f","orcid":"https://orcid.org/0000-0002-0958-4474"},"institutions":[{"id":"https://openalex.org/I930072361","display_name":"Tun Hussein Onn University of Malaysia","ror":"https://ror.org/01c5wha71","country_code":"MY","type":"education","lineage":["https://openalex.org/I930072361"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Lukman Audah","raw_affiliation_strings":["Advanced Telecommunication Research Center, Faculty of Electrical and Electronic Engineering, Universiti Tun Hussein Onn Malaysia (UTHM), Parit Raja, Malaysia"],"raw_orcid":"https://orcid.org/0000-0002-0958-4474","affiliations":[{"raw_affiliation_string":"Advanced Telecommunication Research Center, Faculty of Electrical and Electronic Engineering, Universiti Tun Hussein Onn Malaysia (UTHM), Parit Raja, Malaysia","institution_ids":["https://openalex.org/I930072361"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039678928","display_name":"Mohammed A. Alhartomi","orcid":"https://orcid.org/0000-0002-5955-8864"},"institutions":[{"id":"https://openalex.org/I72264486","display_name":"University of Tabuk","ror":"https://ror.org/04yej8x59","country_code":"SA","type":"education","lineage":["https://openalex.org/I72264486"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mohammed A. Alhartomi","raw_affiliation_strings":["Department of Electrical Engineering, University of Tabuk, Tabuk, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-5955-8864","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering, University of Tabuk, Tabuk, Saudi Arabia","institution_ids":["https://openalex.org/I72264486"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102974926","display_name":"Adeb Salh","orcid":"https://orcid.org/0000-0003-0905-2635"},"institutions":[{"id":"https://openalex.org/I931681460","display_name":"Universiti Tunku Abdul Rahman","ror":"https://ror.org/050pq4m56","country_code":"MY","type":"education","lineage":["https://openalex.org/I931681460"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Adeb Salh","raw_affiliation_strings":["Faculty of Information and Communication Technology, Universiti Tunku Abdul Rahman (UTAR), Kampar, Malaysia"],"raw_orcid":"https://orcid.org/0000-0003-0905-2635","affiliations":[{"raw_affiliation_string":"Faculty of Information and Communication Technology, Universiti Tunku Abdul Rahman (UTAR), Kampar, Malaysia","institution_ids":["https://openalex.org/I931681460"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050230244","display_name":"Godwin Ansa","orcid":"https://orcid.org/0000-0003-1107-5959"},"institutions":[{"id":"https://openalex.org/I127206278","display_name":"Akwa Ibom State University","ror":"https://ror.org/05g3wdh84","country_code":"NG","type":"education","lineage":["https://openalex.org/I127206278"]}],"countries":["NG"],"is_corresponding":false,"raw_author_name":"Godwin Okon Ansa","raw_affiliation_strings":["Department of Computer Science, Faculty of Physical Sciences, Akwa Ibom State University, Mkpat Enin, Akwa Ibom, Nigeria"],"raw_orcid":"https://orcid.org/0000-0003-1107-5959","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Faculty of Physical Sciences, Akwa Ibom State University, Mkpat Enin, Akwa Ibom, Nigeria","institution_ids":["https://openalex.org/I127206278"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072363736","display_name":"Mustafa Maad Hamdi","orcid":"https://orcid.org/0000-0001-5806-4910"},"institutions":[{"id":"https://openalex.org/I27768575","display_name":"University of Anbar","ror":"https://ror.org/055a6gk50","country_code":"IQ","type":"education","lineage":["https://openalex.org/I27768575"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Mustafa Maad Hamdi","raw_affiliation_strings":["Department of Computer Science, College of Computer Science and IT, University of Anbar, Ramadi, Iraq"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, College of Computer Science and IT, University of Anbar, Ramadi, Iraq","institution_ids":["https://openalex.org/I27768575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088242818","display_name":"Diani Galih Saputri","orcid":"https://orcid.org/0000-0001-7124-7148"},"institutions":[{"id":"https://openalex.org/I930072361","display_name":"Tun Hussein Onn University of Malaysia","ror":"https://ror.org/01c5wha71","country_code":"MY","type":"education","lineage":["https://openalex.org/I930072361"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Diani Galih Saputri","raw_affiliation_strings":["Microelectronics and Nanotechnology Shamsuddin Research Centre (MiNT-SRC), UTHM, Parit Raja, Johor, Malaysia"],"raw_orcid":"https://orcid.org/0000-0001-7124-7148","affiliations":[{"raw_affiliation_string":"Microelectronics and Nanotechnology Shamsuddin Research Centre (MiNT-SRC), UTHM, Parit Raja, Johor, Malaysia","institution_ids":["https://openalex.org/I930072361"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103637470","display_name":"Salman Ahmed","orcid":"https://orcid.org/0009-0003-7129-7892"},"institutions":[{"id":"https://openalex.org/I4210145666","display_name":"Embedded Systems (United States)","ror":"https://ror.org/04742eh45","country_code":"US","type":"company","lineage":["https://openalex.org/I4210145666"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Salman Ahmed","raw_affiliation_strings":["VLSI and Embedded Technology (VEST) Focus Group, Faculty of Electrical and Electronic Engineering, UTHM, Parit Raja, Malaysia"],"raw_orcid":"https://orcid.org/0009-0003-7129-7892","affiliations":[{"raw_affiliation_string":"VLSI and Embedded Technology (VEST) Focus Group, Faculty of Electrical and Electronic Engineering, UTHM, Parit Raja, Malaysia","institution_ids":["https://openalex.org/I4210145666"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110081266","display_name":"A. Farah","orcid":null},"institutions":[{"id":"https://openalex.org/I4210153503","display_name":"East Africa University","ror":"https://ror.org/058c2zn82","country_code":"SO","type":"education","lineage":["https://openalex.org/I4210153503"]}],"countries":["SO"],"is_corresponding":false,"raw_author_name":"Abdullahi Farah","raw_affiliation_strings":["Engineering Department, Somtel Telecommunication Company, Bosaso, Somalia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Engineering Department, Somtel Telecommunication Company, Bosaso, Somalia","institution_ids":["https://openalex.org/I4210153503"]}]}],"institutions":[],"countries_distinct_count":6,"institutions_distinct_count":9,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":13.719,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.98833445,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"13","issue":null,"first_page":"112303","last_page":"112323"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7673377990722656},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7610169649124146},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.7224438190460205},{"id":"https://openalex.org/keywords/dual","display_name":"Dual (grammatical number)","score":0.5483319759368896},{"id":"https://openalex.org/keywords/forwarding-plane","display_name":"Forwarding plane","score":0.5324141979217529},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.47209566831588745},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.4698198139667511},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4643917679786682},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4298042058944702},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.31633275747299194},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2028285562992096},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.12016803026199341},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.06689015030860901}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7673377990722656},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7610169649124146},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.7224438190460205},{"id":"https://openalex.org/C2780980858","wikidata":"https://www.wikidata.org/wiki/Q110022","display_name":"Dual (grammatical number)","level":2,"score":0.5483319759368896},{"id":"https://openalex.org/C10597312","wikidata":"https://www.wikidata.org/wiki/Q5473302","display_name":"Forwarding plane","level":3,"score":0.5324141979217529},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47209566831588745},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.4698198139667511},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4643917679786682},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4298042058944702},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.31633275747299194},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2028285562992096},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.12016803026199341},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.06689015030860901},{"id":"https://openalex.org/C124952713","wikidata":"https://www.wikidata.org/wiki/Q8242","display_name":"Literature","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3583712","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3583712","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:2b7217e83a5d4cc2b6a98ce05d024538","is_oa":true,"landing_page_url":"https://doaj.org/article/2b7217e83a5d4cc2b6a98ce05d024538","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 112303-112323 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3583712","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3583712","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":60,"referenced_works":["https://openalex.org/W2111281854","https://openalex.org/W2271840356","https://openalex.org/W2910197492","https://openalex.org/W2911803790","https://openalex.org/W2964630594","https://openalex.org/W2991210281","https://openalex.org/W2998008813","https://openalex.org/W3083285969","https://openalex.org/W3091945716","https://openalex.org/W3097281673","https://openalex.org/W3158456479","https://openalex.org/W3171420864","https://openalex.org/W3174500793","https://openalex.org/W3200241357","https://openalex.org/W3216313743","https://openalex.org/W4214525061","https://openalex.org/W4295066500","https://openalex.org/W4313561542","https://openalex.org/W4362639200","https://openalex.org/W4366483590","https://openalex.org/W4387096259","https://openalex.org/W4387696208","https://openalex.org/W4388765979","https://openalex.org/W4389428576","https://openalex.org/W4389937323","https://openalex.org/W4391068874","https://openalex.org/W4392174032","https://openalex.org/W4392196024","https://openalex.org/W4392912146","https://openalex.org/W4393906152","https://openalex.org/W4394627336","https://openalex.org/W4395471110","https://openalex.org/W4396865615","https://openalex.org/W4396978551","https://openalex.org/W4397001512","https://openalex.org/W4400315589","https://openalex.org/W4400379373","https://openalex.org/W4400684581","https://openalex.org/W4402980833","https://openalex.org/W4403503423","https://openalex.org/W4403676714","https://openalex.org/W4403721765","https://openalex.org/W4404374510","https://openalex.org/W4404726301","https://openalex.org/W4404936228","https://openalex.org/W4406088251","https://openalex.org/W4406137977","https://openalex.org/W4406357096","https://openalex.org/W4406416056","https://openalex.org/W4406812120","https://openalex.org/W4406947421","https://openalex.org/W4407576073","https://openalex.org/W6694517276","https://openalex.org/W6742926833","https://openalex.org/W6752263680","https://openalex.org/W6845375816","https://openalex.org/W6848534547","https://openalex.org/W6851006409","https://openalex.org/W6871931091","https://openalex.org/W6873139720"],"related_works":["https://openalex.org/W2767068794","https://openalex.org/W4229489764","https://openalex.org/W3114854705","https://openalex.org/W2735897973","https://openalex.org/W4315705477","https://openalex.org/W4213341501","https://openalex.org/W3195575042","https://openalex.org/W2898113880","https://openalex.org/W2793567886","https://openalex.org/W4214777079"],"abstract_inverted_index":{"Software-defined":[0],"networking":[1],"(SDN)":[2],"has":[3],"revolutionized":[4],"network":[5],"management":[6],"by":[7],"centralizing":[8],"control":[9,183],"through":[10],"software,":[11],"thereby":[12],"enabling":[13],"dynamic":[14],"traffic":[15],"adjustments":[16],"that":[17,76,168],"are":[18,35],"independent":[19],"of":[20,38,48],"the":[21,32,45,70,96,107,125,134,146,150,164,169,191],"data":[22,181],"plane.":[23],"However,":[24],"this":[25,53,55],"innovation":[26],"introduces":[27],"significant":[28],"security":[29],"vulnerabilities":[30],"because":[31],"existing":[33],"solutions":[34],"largely":[36],"adaptations":[37],"traditional":[39],"methods":[40],"and":[41,83,118,139,159,182],"fail":[42],"to":[43,121,141,154],"address":[44,52],"unique":[46],"challenges":[47],"SDN":[49,193],"environments.":[50],"To":[51],"issue,":[54],"study":[56],"proposes":[57],"a":[58,73,78,102],"machine-learning":[59],"(ML)-based":[60],"intrusion":[61,92],"detection":[62,93,157,175],"framework":[63,71],"tailored":[64],"specifically":[65],"for":[66],"SDN.":[67],"In":[68],"particular,":[69],"utilizes":[72],"hybrid":[74,151],"model":[75],"combines":[77],"Support":[79],"Vector":[80],"Machine":[81],"(SVM)":[82],"Random":[84],"Forest":[85],"(RF)":[86],"classifiers":[87],"(HSF),":[88],"which":[89],"significantly":[90],"improves":[91],"accuracy.":[94],"Specifically,":[95],"proposed":[97],"solution":[98],"is":[99],"structured":[100],"as":[101,115,133],"three-layer":[103],"protection":[104],"mechanism.":[105],"First,":[106],"Data":[108],"Plane":[109,127],"Monitoring":[110,128],"layer":[111,129],"examines":[112],"features,":[113],"such":[114,132],"packet":[116],"count":[117],"byte":[119],"count,":[120],"detect":[122],"anomalies.":[123],"Second,":[124],"Control":[126],"evaluates":[130],"attributes":[131],"source":[135],"IP,":[136,138],"destination":[137],"protocols":[140],"identify":[142],"suspicious":[143],"activity.":[144],"Finally,":[145],"Detection":[147],"Layer":[148],"leverages":[149],"ML":[152],"approach":[153],"further":[155],"strengthen":[156],"capabilities":[158],"ensure":[160],"timely":[161],"responses.":[162],"Importantly,":[163],"experimental":[165],"results":[166],"reveal":[167],"HSF":[170],"technique":[171],"achieves":[172],"an":[173],"anomaly":[174],"rate":[176],"exceeding":[177],"99%":[178],"across":[179],"both":[180],"planes.":[184],"This":[185],"highlights":[186],"its":[187],"efficacy":[188],"in":[189],"securing":[190],"next-generation":[192],"networks.":[194]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":8}],"updated_date":"2026-06-23T13:55:30.953635","created_date":"2025-10-10T00:00:00"}