{"id":"https://openalex.org/W4210653685","doi":"https://doi.org/10.1109/globecom46510.2021.9685643","title":"A Novel Machine Learning Framework for Advanced Attack Detection using SDN","display_name":"A Novel Machine Learning Framework for Advanced Attack Detection using SDN","publication_year":2021,"publication_date":"2021-12-01","ids":{"openalex":"https://openalex.org/W4210653685","doi":"https://doi.org/10.1109/globecom46510.2021.9685643"},"language":"en","primary_location":{"id":"doi:10.1109/globecom46510.2021.9685643","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom46510.2021.9685643","pdf_url":null,"source":{"id":"https://openalex.org/S4363607714","display_name":"2021 IEEE Global Communications Conference (GLOBECOM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE Global Communications Conference (GLOBECOM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069783617","display_name":"Zakaria Abou El Houda","orcid":"https://orcid.org/0000-0002-2893-1101"},"institutions":[{"id":"https://openalex.org/I70931966","display_name":"Universit\u00e9 de Montr\u00e9al","ror":"https://ror.org/0161xgx34","country_code":"CA","type":"education","lineage":["https://openalex.org/I70931966"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Zakaria Abou El Houda","raw_affiliation_strings":["NRL, University of Montreal,Department of Computer Science and Operational Research,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NRL, University of Montreal,Department of Computer Science and Operational Research,Canada","institution_ids":["https://openalex.org/I70931966"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055329164","display_name":"Abdelhakim Hafid","orcid":"https://orcid.org/0000-0001-8597-7344"},"institutions":[{"id":"https://openalex.org/I70931966","display_name":"Universit\u00e9 de Montr\u00e9al","ror":"https://ror.org/0161xgx34","country_code":"CA","type":"education","lineage":["https://openalex.org/I70931966"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Abdelhakim Senhaji Hafid","raw_affiliation_strings":["NRL, University of Montreal,Department of Computer Science and Operational Research,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NRL, University of Montreal,Department of Computer Science and Operational Research,Canada","institution_ids":["https://openalex.org/I70931966"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042499396","display_name":"Lyes Khoukhi","orcid":"https://orcid.org/0000-0002-1922-769X"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I194210350","display_name":"\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs de Caen","ror":"https://ror.org/01fpqqe90","country_code":"FR","type":"education","lineage":["https://openalex.org/I194210350","https://openalex.org/I4210105918"]},{"id":"https://openalex.org/I4210105918","display_name":"Normandie Universit\u00e9","ror":"https://ror.org/01k40cz91","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210105918"]},{"id":"https://openalex.org/I4210139483","display_name":"GREYC","ror":"https://ror.org/043749971","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I194210350","https://openalex.org/I4210105918","https://openalex.org/I4210105918","https://openalex.org/I4210139483","https://openalex.org/I4210159245","https://openalex.org/I98702875"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Lyes Khoukhi","raw_affiliation_strings":["GREYC CNRS, ENSICAEN, Normandie University,France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"GREYC CNRS, ENSICAEN, Normandie University,France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I194210350","https://openalex.org/I4210105918","https://openalex.org/I4210139483"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":36,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8457138538360596},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6936434507369995},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.6592292785644531},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.6264498233795166},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.603483259677887},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5224125385284424},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.47693437337875366},{"id":"https://openalex.org/keywords/forwarding-plane","display_name":"Forwarding plane","score":0.47170495986938477},{"id":"https://openalex.org/keywords/network-management","display_name":"Network management","score":0.43825310468673706},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.4334115982055664},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.4169413149356842},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.38982734084129333},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.36483943462371826},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.350713849067688},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.33953285217285156},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1874571442604065},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.09898030757904053}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8457138538360596},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6936434507369995},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.6592292785644531},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.6264498233795166},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.603483259677887},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5224125385284424},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.47693437337875366},{"id":"https://openalex.org/C10597312","wikidata":"https://www.wikidata.org/wiki/Q5473302","display_name":"Forwarding plane","level":3,"score":0.47170495986938477},{"id":"https://openalex.org/C129763632","wikidata":"https://www.wikidata.org/wiki/Q1454667","display_name":"Network management","level":2,"score":0.43825310468673706},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.4334115982055664},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.4169413149356842},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.38982734084129333},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36483943462371826},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.350713849067688},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.33953285217285156},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1874571442604065},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.09898030757904053},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C6557445","wikidata":"https://www.wikidata.org/wiki/Q173113","display_name":"Agronomy","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/globecom46510.2021.9685643","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom46510.2021.9685643","pdf_url":null,"source":{"id":"https://openalex.org/S4363607714","display_name":"2021 IEEE Global Communications Conference (GLOBECOM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE Global Communications Conference (GLOBECOM)","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-03559532v1","is_oa":false,"landing_page_url":"https://utt.hal.science/hal-03559532","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"GLOBECOM 2021 - 2021 IEEE Global Communications Conference, Dec 2021, Madrid, Spain. pp.1-6, ⟨10.1109/GLOBECOM46510.2021.9685643⟩","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:HAL:hal-03778454v1","is_oa":false,"landing_page_url":"https://hal.science/hal-03778454","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"GLOBECOM 2021 - 2021 IEEE Global Communications Conference","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W2044439547","https://openalex.org/W2101234009","https://openalex.org/W2296509296","https://openalex.org/W2346714907","https://openalex.org/W2742503346","https://openalex.org/W2789389144","https://openalex.org/W2806820837","https://openalex.org/W2916706563","https://openalex.org/W2963129815","https://openalex.org/W2971466910","https://openalex.org/W3005345245","https://openalex.org/W3010495106","https://openalex.org/W3034839769","https://openalex.org/W3045826655","https://openalex.org/W3045959720","https://openalex.org/W3047861058","https://openalex.org/W3081430061","https://openalex.org/W3097179687","https://openalex.org/W3111563271","https://openalex.org/W3112733201","https://openalex.org/W3131814245","https://openalex.org/W3190151554","https://openalex.org/W3192585564","https://openalex.org/W3196875268","https://openalex.org/W6748971887"],"related_works":["https://openalex.org/W4214777079","https://openalex.org/W2051935741","https://openalex.org/W3122360749","https://openalex.org/W2547441564","https://openalex.org/W4377224402","https://openalex.org/W4243609393","https://openalex.org/W4211055425","https://openalex.org/W2926903444","https://openalex.org/W2130026698","https://openalex.org/W2292300552"],"abstract_inverted_index":{"Recently,":[0],"software":[1],"defined":[2],"networks":[3],"(SDN)":[4],"has":[5],"emerged":[6],"as":[7],"novel":[8,181,188],"technology":[9],"that":[10,103,185,216],"leverages":[11],"network":[12,16,36,55,119,146,199,211,245],"programmability":[13],"to":[14,34,60,79,116,141,165,171,196,240],"facilitate":[15],"management.":[17],"SDN":[18,32,38],"provides":[19],"a":[20,27,50,97,109,135,149,180,187,237],"global":[21],"view":[22],"of":[23,125,145,225],"the":[24,40,44,54,63,123,143,167,208,242],"network,":[25],"through":[26],"logically":[28],"centralized":[29],"component,":[30],"called":[31,192],"controller,":[33],"strengthen":[35],"security.":[37],"separates":[39],"control":[41,52],"plane":[42],"from":[43],"data":[45,136,147],"plane,":[46],"which":[47],"allows":[48],"for":[49],"more":[51],"over":[53],"and":[56,87,113,151,174,178,227],"brings":[57],"new":[58,64,243],"capabilities":[59],"cope":[61],"with":[62,108],"emerging":[65,244],"security":[66,120,200,212,246],"threats":[67,121,201,247],"(i.e.,":[68],"zero-day":[69],"attacks).":[70],"Existing":[71],"attack":[72],"detection":[73,85,190,228],"schemes":[74],"are":[75],"facing":[76],"obstacles":[77],"due":[78],"high":[80,88],"false":[81],"positive":[82],"rates,":[83],"low":[84],"performances,":[86],"computational":[89,233],"costs.":[90],"To":[91],"address":[92],"these":[93],"issues,":[94],"we":[95],"propose":[96],"multi-module":[98],"Machine":[99],"Learning":[100],"(ML)":[101],"framework":[102,131,219,239],"combines":[104],"unsupervised":[105,182],"ML":[106,183],"techniques":[107],"scalable":[110,150],"feature":[111],"collection":[112,138],"selection":[114],"scheme":[115],"effectively/timely":[117,197],"detect":[118,198],"in":[122,148,202,223,248],"context":[124],"SDN.":[126,203,249],"In":[127],"particular,":[128],"our":[129,217],"proposed":[130,218],"consists":[132],"of:":[133],"(1)":[134],"flow":[137],"module":[139,164,184],"(DFC)":[140],"gather":[142],"features":[144,170],"efficient":[152],"way":[153],"using":[154,207],"sFlow":[155],"protocol;":[156],"(2)":[157],"an":[158],"Information":[159],"gain":[160],"Feature":[161],"Selection":[162],"(IGF)":[163],"select":[166],"most":[168],"informative/relevant":[169],"reduce":[172],"training":[173],"testing":[175],"time":[176],"complexity;":[177,234],"(3)":[179],"uses":[186],"outlier":[189],"scheme,":[191],"Isolation":[193],"Forest":[194],"(ML-IF),":[195],"The":[204],"experimental":[205],"results":[206],"well-known":[209],"public":[210],"dataset":[213],"UNSW-NB15,":[214],"show":[215],"outperforms":[220],"state-of-the-art":[221],"contributions":[222],"terms":[224],"accuracy":[226],"rate":[229],"while":[230],"significantly":[231],"reducing":[232],"making":[235],"it":[236],"promising":[238],"mitigate":[241]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":8}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}