{"id":"https://openalex.org/W7125799810","doi":"https://doi.org/10.1109/icit64950.2025.11049252","title":"A Survey of Supervised, Unsupervised, and Ensemble Learning Approaches for DDoS Detection in SDN","display_name":"A Survey of Supervised, Unsupervised, and Ensemble Learning Approaches for DDoS Detection in SDN","publication_year":2025,"publication_date":"2025-05-27","ids":{"openalex":"https://openalex.org/W7125799810","doi":"https://doi.org/10.1109/icit64950.2025.11049252"},"language":null,"primary_location":{"id":"doi:10.1109/icit64950.2025.11049252","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icit64950.2025.11049252","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 12th International Conference on Information Technology (ICIT)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5124012848","display_name":"Abdinasir Hirsi","orcid":null},"institutions":[{"id":"https://openalex.org/I4210157195","display_name":"Jamhuriya University of Science and Technology","ror":"https://ror.org/05brr5h08","country_code":"SO","type":"education","lineage":["https://openalex.org/I4210157195"]}],"countries":["SO"],"is_corresponding":false,"raw_author_name":"Abdinasir Hirsi","raw_affiliation_strings":["Jamhuriya University of Science and Technology,Faculty of Engineering,Mogadishu,Somalia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jamhuriya University of Science and Technology,Faculty of Engineering,Mogadishu,Somalia","institution_ids":["https://openalex.org/I4210157195"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076365142","display_name":"Jafar Ismail Mohamed","orcid":null},"institutions":[{"id":"https://openalex.org/I4210153503","display_name":"East Africa University","ror":"https://ror.org/058c2zn82","country_code":"SO","type":"education","lineage":["https://openalex.org/I4210153503"]}],"countries":["SO"],"is_corresponding":false,"raw_author_name":"Jafar Ismail Mohamed","raw_affiliation_strings":["AI and Network Security (AiNetSec),Research Lab (Virtual Lab),Bosaso,Somalia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AI and Network Security (AiNetSec),Research Lab (Virtual Lab),Bosaso,Somalia","institution_ids":["https://openalex.org/I4210153503"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5117613468","display_name":"Abubakar Abdi Warsame","orcid":null},"institutions":[{"id":"https://openalex.org/I4210153503","display_name":"East Africa University","ror":"https://ror.org/058c2zn82","country_code":"SO","type":"education","lineage":["https://openalex.org/I4210153503"]}],"countries":["SO"],"is_corresponding":false,"raw_author_name":"Abubakar Abdi Warsame","raw_affiliation_strings":["AI and Network Security (AiNetSec),Research Lab (Virtual Lab),Bosaso,Somalia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AI and Network Security (AiNetSec),Research Lab (Virtual Lab),Bosaso,Somalia","institution_ids":["https://openalex.org/I4210153503"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123983578","display_name":"Abdirizak Abdullahi Khalif","orcid":null},"institutions":[{"id":"https://openalex.org/I4210153503","display_name":"East Africa University","ror":"https://ror.org/058c2zn82","country_code":"SO","type":"education","lineage":["https://openalex.org/I4210153503"]}],"countries":["SO"],"is_corresponding":false,"raw_author_name":"Abdirizak Abdullahi Khalif","raw_affiliation_strings":["AI and Network Security (AiNetSec),Research Lab (Virtual Lab),Bosaso,Somalia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AI and Network Security (AiNetSec),Research Lab (Virtual Lab),Bosaso,Somalia","institution_ids":["https://openalex.org/I4210153503"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066783464","display_name":"Lukman Audah\u200f","orcid":"https://orcid.org/0000-0002-0958-4474"},"institutions":[{"id":"https://openalex.org/I930072361","display_name":"Tun Hussein Onn University of Malaysia","ror":"https://ror.org/01c5wha71","country_code":"MY","type":"education","lineage":["https://openalex.org/I930072361"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Lukman Audah","raw_affiliation_strings":["Universiti Tun Hussein Onn Malaysia,Faculty of Electrical &#x0026; Electronics"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Tun Hussein Onn Malaysia,Faculty of Electrical &#x0026; Electronics","institution_ids":["https://openalex.org/I930072361"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123942219","display_name":"Adeb Salh","orcid":null},"institutions":[{"id":"https://openalex.org/I927443849","display_name":"Tunku Abdul Rahman University of Management and Technology","ror":"https://ror.org/03b3zvp63","country_code":"MY","type":"education","lineage":["https://openalex.org/I927443849"]},{"id":"https://openalex.org/I931681460","display_name":"Universiti Tunku Abdul Rahman","ror":"https://ror.org/050pq4m56","country_code":"MY","type":"education","lineage":["https://openalex.org/I931681460"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Adeb Salh","raw_affiliation_strings":["University Tunku Abdul Rahman,Infromation &#x0026; Communication Technology,Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University Tunku Abdul Rahman,Infromation &#x0026; Communication Technology,Malaysia","institution_ids":["https://openalex.org/I927443849","https://openalex.org/I931681460"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123904078","display_name":"Salman Ahmed","orcid":null},"institutions":[{"id":"https://openalex.org/I930072361","display_name":"Tun Hussein Onn University of Malaysia","ror":"https://ror.org/01c5wha71","country_code":"MY","type":"education","lineage":["https://openalex.org/I930072361"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Salman Ahmed","raw_affiliation_strings":["Universiti Tun Hussein Onn Malaysia,Faculty of Electrical &#x0026; Electronics,Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Tun Hussein Onn Malaysia,Faculty of Electrical &#x0026; Electronics,Malaysia","institution_ids":["https://openalex.org/I930072361"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124050361","display_name":"Diani Galih Saputri","orcid":null},"institutions":[{"id":"https://openalex.org/I930072361","display_name":"Tun Hussein Onn University of Malaysia","ror":"https://ror.org/01c5wha71","country_code":"MY","type":"education","lineage":["https://openalex.org/I930072361"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Diani Galih Saputri","raw_affiliation_strings":["Universiti Tun Hussein Onn Malaysia,Faculty of Electrical &#x0026; Electronics,Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Tun Hussein Onn Malaysia,Faculty of Electrical &#x0026; Electronics,Malaysia","institution_ids":["https://openalex.org/I930072361"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5124042527","display_name":"Abdiaziz Mohamed Abdirahman","orcid":null},"institutions":[{"id":"https://openalex.org/I45533404","display_name":"University of Technology and Management","ror":"https://ror.org/03kfqmz83","country_code":"IN","type":"education","lineage":["https://openalex.org/I45533404"]},{"id":"https://openalex.org/I94625822","display_name":"Northern University of Malaysia","ror":"https://ror.org/01ss10648","country_code":"MY","type":"education","lineage":["https://openalex.org/I94625822"]}],"countries":["IN","MY"],"is_corresponding":false,"raw_author_name":"Abdiaziz Mohamed Abdirahman","raw_affiliation_strings":["UTHM University,Faculty of Technology and Business Management,Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UTHM University,Faculty of Technology and Business Management,Malaysia","institution_ids":["https://openalex.org/I45533404","https://openalex.org/I94625822"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":9,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.5403,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.96234962,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"99","last_page":"104"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9433000087738037,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9433000087738037,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.034699998795986176,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.002400000113993883,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6503000259399414},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.6398000121116638},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5807999968528748},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4456999897956848},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.4162999987602234},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.3628999888896942}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7940999865531921},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6503000259399414},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.6398000121116638},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5807999968528748},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.46720001101493835},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4456999897956848},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.439300000667572},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.4162999987602234},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.3628999888896942},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3305000066757202},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3165000081062317},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.30230000615119934},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.29820001125335693},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.28189998865127563},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.27639999985694885},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2632000148296356}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icit64950.2025.11049252","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icit64950.2025.11049252","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 12th International Conference on Information Technology (ICIT)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4369845390319824,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Software-Defined":[0],"Networking":[1],"(SDN)":[2],"offers":[3],"significant":[4],"advantages":[5],"in":[6,50,87,118],"network":[7,32],"management":[8],"and":[9,29,43,85,95,102,112,134,140],"scalability,":[10],"but":[11],"is":[12],"vulnerable":[13],"to":[14],"security":[15],"threats,":[16],"particularly":[17],"distributed":[18],"denial-of-service":[19],"(DDoS)":[20],"attacks.":[21],"These":[22],"attacks":[23],"can":[24],"manipulate":[25],"SDN":[26,89],"flow":[27],"tables":[28],"disrupt":[30],"the":[31,53,74,138],"operations.":[33],"This":[34,71],"paper":[35,106],"presents":[36],"a":[37,64,68,123,128,135],"comprehensive":[38],"survey":[39],"of":[40,55,76,125,130],"supervised,":[41],"unsupervised,":[42],"ensemble":[44],"machine-learning":[45,78],"techniques":[46],"for":[47,115],"DDoS":[48,116],"detection":[49,117],"SDN.":[51,119],"To":[52],"best":[54],"our":[56],"knowledge,":[57],"no":[58],"previous":[59],"study":[60,72],"has":[61],"provided":[62],"such":[63,99],"detailed":[65],"analysis":[66],"within":[67],"single":[69],"work.":[70],"evaluates":[73],"effectiveness":[75],"various":[77],"models,":[79],"focusing":[80],"on":[81],"their":[82],"applications,":[83],"benefits,":[84],"limitations":[86],"securing":[88],"environments.":[90],"It":[91],"reviews":[92],"state-of-the-art":[93],"methods":[94],"discusses":[96],"performance":[97],"metrics":[98],"as":[100],"accuracy":[101],"computational":[103],"complexity.":[104],"The":[105,120],"also":[107],"identifies":[108],"key":[109],"research":[110],"challenges":[111],"future":[113],"directions":[114],"structure":[121],"includes":[122],"review":[124],"related":[126],"studies,":[127],"taxonomy":[129],"machine":[131],"learning":[132],"techniques,":[133],"conclusion":[136],"summarizing":[137],"findings":[139],"implications.":[141]},"counts_by_year":[{"year":2025,"cited_by_count":5}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-01-28T00:00:00"}
