{"id":"https://openalex.org/W4414110691","doi":"https://doi.org/10.1109/access.2025.3608205","title":"Real-Time DDoS Attack Detection in SDN Based on En-CNN and OptiLGBM","display_name":"Real-Time DDoS Attack Detection in SDN Based on En-CNN and OptiLGBM","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4414110691","doi":"https://doi.org/10.1109/access.2025.3608205"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3608205","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3608205","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3608205","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005368806","display_name":"Guoqing Yang","orcid":"https://orcid.org/0009-0002-1784-1992"},"institutions":[{"id":"https://openalex.org/I4210098369","display_name":"Institute of Disaster Prevention","ror":"https://ror.org/00pyv1r78","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210098369","https://openalex.org/I90149893"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guoqing Yang","raw_affiliation_strings":["School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China"],"raw_orcid":"https://orcid.org/0009-0002-1784-1992","affiliations":[{"raw_affiliation_string":"School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China","institution_ids":["https://openalex.org/I4210098369"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xiaoying Wang","orcid":"https://orcid.org/0009-0005-3487-3832"},"institutions":[{"id":"https://openalex.org/I4210098369","display_name":"Institute of Disaster Prevention","ror":"https://ror.org/00pyv1r78","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210098369","https://openalex.org/I90149893"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoying Wang","raw_affiliation_strings":["School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China"],"raw_orcid":"https://orcid.org/0009-0005-3487-3832","affiliations":[{"raw_affiliation_string":"School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China","institution_ids":["https://openalex.org/I4210098369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101265364","display_name":"Chunhui Li","orcid":"https://orcid.org/0009-0005-5597-4640"},"institutions":[{"id":"https://openalex.org/I4210098369","display_name":"Institute of Disaster Prevention","ror":"https://ror.org/00pyv1r78","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210098369","https://openalex.org/I90149893"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunhui Li","raw_affiliation_strings":["School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China","institution_ids":["https://openalex.org/I4210098369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050692628","display_name":"Xinyu Li","orcid":"https://orcid.org/0009-0002-7327-7978"},"institutions":[{"id":"https://openalex.org/I4210098369","display_name":"Institute of Disaster Prevention","ror":"https://ror.org/00pyv1r78","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210098369","https://openalex.org/I90149893"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinyu Li","raw_affiliation_strings":["School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China","institution_ids":["https://openalex.org/I4210098369"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jinsha Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210098369","display_name":"Institute of Disaster Prevention","ror":"https://ror.org/00pyv1r78","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210098369","https://openalex.org/I90149893"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinsha Zhang","raw_affiliation_strings":["School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China","institution_ids":["https://openalex.org/I4210098369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018482800","display_name":"Fangfang Cui","orcid":null},"institutions":[{"id":"https://openalex.org/I4210098369","display_name":"Institute of Disaster Prevention","ror":"https://ror.org/00pyv1r78","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210098369","https://openalex.org/I90149893"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fangfang Cui","raw_affiliation_strings":["School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China","institution_ids":["https://openalex.org/I4210098369"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035283385","display_name":"Ruimin Gu","orcid":"https://orcid.org/0009-0009-8865-129X"},"institutions":[{"id":"https://openalex.org/I4210098369","display_name":"Institute of Disaster Prevention","ror":"https://ror.org/00pyv1r78","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210098369","https://openalex.org/I90149893"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruize Gu","raw_affiliation_strings":["School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Institute of Disaster Prevention, Sanhe, Hebei, China","institution_ids":["https://openalex.org/I4210098369"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210098369"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":3.7554,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.93969733,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"13","issue":null,"first_page":"161453","last_page":"161471"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9797999858856201,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9797999858856201,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9132000207901001,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8030999898910522},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.5490999817848206},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.525600016117096},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.5185999870300293},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.47110000252723694},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3179999887943268},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3068999946117401}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8669999837875366},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8030999898910522},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.5490999817848206},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.525600016117096},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.5185999870300293},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.47110000252723694},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4032999873161316},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36970001459121704},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3596999943256378},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.33899998664855957},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3179999887943268},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3068999946117401},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2924000024795532},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.2759999930858612},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.275299996137619},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.27480000257492065},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2680000066757202},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.25769999623298645},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.25540000200271606},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2538999915122986},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2508000135421753}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3608205","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3608205","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:c89977d7955b4c32ae271c98850fc042","is_oa":true,"landing_page_url":"https://doaj.org/article/c89977d7955b4c32ae271c98850fc042","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 161453-161471 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3608205","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3608205","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W2104692292","https://openalex.org/W2989690704","https://openalex.org/W3036012999","https://openalex.org/W3036749504","https://openalex.org/W3117452863","https://openalex.org/W3117819143","https://openalex.org/W3159175466","https://openalex.org/W3159238871","https://openalex.org/W4200465382","https://openalex.org/W4308424950","https://openalex.org/W4313641248","https://openalex.org/W4322502180","https://openalex.org/W4322770678","https://openalex.org/W4389720782","https://openalex.org/W4389914878","https://openalex.org/W4390692323","https://openalex.org/W4391068874","https://openalex.org/W4392131573","https://openalex.org/W4400887755","https://openalex.org/W4401452496","https://openalex.org/W4404119248","https://openalex.org/W4404302957","https://openalex.org/W4405292220"],"related_works":["https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W1968168724","https://openalex.org/W2204131204","https://openalex.org/W2754163055","https://openalex.org/W4322008378","https://openalex.org/W2383770723","https://openalex.org/W2186749541","https://openalex.org/W2360429410","https://openalex.org/W4256682929"],"abstract_inverted_index":{"Distributed":[0],"Denial-of-Service":[1],"(DDoS)":[2],"attacks":[3,135],"pose":[4],"serious":[5],"risks":[6],"to":[7,38,54],"Software-Defined":[8],"Networks":[9,50],"(SDN),":[10],"where":[11],"existing":[12],"detection":[13,104],"methods":[14],"often":[15],"suffer":[16],"from":[17],"low":[18],"accuracy,":[19],"high":[20,23],"latency,":[21,62],"and":[22,69,84,105,114,136],"false":[24,45],"positives.":[25,46],"To":[26],"address":[27],"these":[28],"issues,":[29],"this":[30],"study":[31],"applies":[32],"an":[33,110,115],"adaptive":[34],"Borderline-SMOTE":[35],"(BS)":[36],"method":[37],"balance":[39],"the":[40,91,131],"CICDDoS2019":[41],"dataset,":[42],"effectively":[43],"reducing":[44],"Enhanced":[47],"Convolutional":[48],"Neural":[49],"(En-CNN)":[51],"is":[52],"designed":[53],"perform":[55],"efficient":[56],"traffic":[57,139],"feature":[58],"extraction":[59],"with":[60],"minimal":[61],"while":[63],"Optimized":[64],"LightGBM":[65],"(OptiLGBM)":[66],"provides":[67],"fast":[68],"accurate":[70],"classification":[71],"through":[72],"tuned":[73],"parameters":[74],"for":[75,101,147],"rapid":[76],"convergence.":[77],"The":[78],"proposed":[79],"hybrid":[80],"model":[81],"integrates":[82],"En-CNN":[83],"OptiLGBM.":[85],"Both":[86],"models":[87],"are":[88],"deployed":[89],"within":[90,140],"Ryu":[92],"SDN":[93,148],"controller.":[94],"Together,":[95],"they":[96],"form":[97],"a":[98],"real-time":[99],"framework":[100],"DDoS":[102],"attack":[103],"mitigation.":[106],"Experimental":[107],"results":[108],"demonstrate":[109],"accuracy":[111],"of":[112,119],"99.98%":[113],"average":[116],"response":[117],"time":[118],"less":[120],"than":[121],"1":[122],"second,":[123],"outperforming":[124],"baseline":[125],"models.":[126],"Real-network":[127],"tests":[128],"confirm":[129],"that":[130],"system":[132],"can":[133],"block":[134],"restore":[137],"normal":[138],"3":[141],"seconds,":[142],"highlighting":[143],"its":[144],"practical":[145],"value":[146],"security.":[149]},"counts_by_year":[{"year":2026,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}