{"id":"https://openalex.org/W4417282174","doi":"https://doi.org/10.1109/pimrc62392.2025.11274964","title":"From Insight to Action: XAI-Enhanced Detection of DDoS Attacks in Software Defined Networks","display_name":"From Insight to Action: XAI-Enhanced Detection of DDoS Attacks in Software Defined Networks","publication_year":2025,"publication_date":"2025-09-01","ids":{"openalex":"https://openalex.org/W4417282174","doi":"https://doi.org/10.1109/pimrc62392.2025.11274964"},"language":null,"primary_location":{"id":"doi:10.1109/pimrc62392.2025.11274964","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pimrc62392.2025.11274964","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 36th International Symposium on Personal, Indoor and Mobile Radio Communications (PIMRC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010303254","display_name":"Thulitha Senevirathna","orcid":null},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":true,"raw_author_name":"Thulitha Senevirathna","raw_affiliation_strings":["University College,Network Softwarization and Security Labs (NetsLab), School of Computer Science,Dublin,Ireland"],"affiliations":[{"raw_affiliation_string":"University College,Network Softwarization and Security Labs (NetsLab), School of Computer Science,Dublin,Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106953857","display_name":"Bet\u00fcl G\u00fcven\u00e7 Paltun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bet\u00fcl G\u00fcven\u00e7 Paltun","raw_affiliation_strings":["Ericsson Research,Istanbul,Turkey"],"affiliations":[{"raw_affiliation_string":"Ericsson Research,Istanbul,Turkey","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068589390","display_name":"Ramin Fuladi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ramin Fuladi","raw_affiliation_strings":["Ericsson Research,Istanbul,Turkey"],"affiliations":[{"raw_affiliation_string":"Ericsson Research,Istanbul,Turkey","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100377071","display_name":"Shen Wang","orcid":"https://orcid.org/0000-0002-5748-5438"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Shen Wang","raw_affiliation_strings":["University College,Network Softwarization and Security Labs (NetsLab), School of Computer Science,Dublin,Ireland"],"affiliations":[{"raw_affiliation_string":"University College,Network Softwarization and Security Labs (NetsLab), School of Computer Science,Dublin,Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068169019","display_name":"Madhusanka Liyanage","orcid":"https://orcid.org/0000-0003-4786-030X"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Madhusanka Liyanage","raw_affiliation_strings":["University College,Network Softwarization and Security Labs (NetsLab), School of Computer Science,Dublin,Ireland"],"affiliations":[{"raw_affiliation_string":"University College,Network Softwarization and Security Labs (NetsLab), School of Computer Science,Dublin,Ireland","institution_ids":["https://openalex.org/I100930933"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5010303254"],"corresponding_institution_ids":["https://openalex.org/I100930933"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.47448811,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.8151000142097473,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.8151000142097473,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.09139999747276306,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.013299999758601189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8935999870300293},{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.7414000034332275},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.5557000041007996},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5435000061988831},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.5138999819755554},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.42170000076293945},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.41019999980926514},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.3774999976158142}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8935999870300293},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7577999830245972},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.7414000034332275},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.5557000041007996},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5435000061988831},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.5138999819755554},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.42170000076293945},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.41019999980926514},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3978999853134155},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3774999976158142},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37450000643730164},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.35830000042915344},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.35260000824928284},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3521000146865845},{"id":"https://openalex.org/C2780428219","wikidata":"https://www.wikidata.org/wiki/Q16952335","display_name":"Cover (algebra)","level":2,"score":0.34630000591278076},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3278999924659729},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.3262999951839447},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.32330000400543213},{"id":"https://openalex.org/C112789634","wikidata":"https://www.wikidata.org/wiki/Q18207010","display_name":"False positives and false negatives","level":3,"score":0.2904999852180481},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.2784999907016754},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.27549999952316284},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2732999920845032},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.27300000190734863},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2696000039577484},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.26899999380111694},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.2563999891281128}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/pimrc62392.2025.11274964","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pimrc62392.2025.11274964","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 36th International Symposium on Personal, Indoor and Mobile Radio Communications (PIMRC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1202151019","https://openalex.org/W2136451165","https://openalex.org/W2147118406","https://openalex.org/W2154195006","https://openalex.org/W2282821441","https://openalex.org/W2557327414","https://openalex.org/W2991167171","https://openalex.org/W3209732111","https://openalex.org/W4225322449","https://openalex.org/W4283793177","https://openalex.org/W4285248859","https://openalex.org/W4294691140","https://openalex.org/W4295832444","https://openalex.org/W4313040981","https://openalex.org/W4391807441","https://openalex.org/W4404055172","https://openalex.org/W4404239798","https://openalex.org/W4406892920"],"related_works":[],"abstract_inverted_index":{"Software-defined":[0],"networking":[1],"(SDN)":[2],"has":[3],"revolutionized":[4],"modern":[5],"mobile":[6],"networks":[7],"by":[8],"enhancing":[9],"flexibility":[10],"and":[11,69,110],"scalability,":[12],"but":[13],"its":[14],"centralized":[15],"architecture":[16],"remains":[17],"a":[18,31,79,107],"prime":[19],"target":[20],"for":[21],"Distributed":[22],"Denial":[23],"of":[24,63,66,73],"Service":[25],"(DDoS)":[26],"attacks.":[27],"This":[28],"paper":[29],"presents":[30],"novel":[32],"detection":[33,51,61],"framework":[34],"that":[35,95],"employs":[36],"frequency-domain":[37],"analysis":[38],"to":[39,58],"uncover":[40],"hidden":[41],"attack":[42,82],"patterns":[43],"within":[44],"PacketIn":[45],"message":[46],"fluctuations.":[47],"To":[48],"further":[49],"refine":[50],"accuracy,":[52],"eXplainable":[53],"AI":[54],"(XAI)":[55],"is":[56],"integrated":[57],"optimize":[59],"the":[60,71,74],"accuracy":[62],"unseen":[64],"types":[65],"DDoS":[67,104],"attacks":[68],"enhance":[70],"interpretability":[72],"model.":[75],"Our":[76],"approach":[77],"enables":[78],"more":[80,108],"precise":[81],"classification":[83],"while":[84],"minimizing":[85],"false":[86],"positives":[87],"using":[88],"XAI-driven":[89],"knowledge":[90],"transfer.":[91],"Experimental":[92],"evaluations":[93],"confirm":[94],"this":[96],"method":[97],"significantly":[98],"strengthens":[99],"SDN":[100],"resilience":[101],"against":[102],"evolving":[103],"threats,":[105],"providing":[106],"adaptive":[109],"intelligent":[111],"defense":[112],"mechanism.":[113]},"counts_by_year":[],"updated_date":"2026-03-07T16:01:11.037858","created_date":"2025-12-12T00:00:00"}
