{"id":"https://openalex.org/W4285274733","doi":"https://doi.org/10.1109/tccn.2022.3186331","title":"A Flow-Based Anomaly Detection Approach With Feature Selection Method Against DDoS Attacks in SDNs","display_name":"A Flow-Based Anomaly Detection Approach With Feature Selection Method Against DDoS Attacks in SDNs","publication_year":2022,"publication_date":"2022-06-28","ids":{"openalex":"https://openalex.org/W4285274733","doi":"https://doi.org/10.1109/tccn.2022.3186331"},"language":"en","primary_location":{"id":"doi:10.1109/tccn.2022.3186331","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tccn.2022.3186331","pdf_url":"https://ieeexplore.ieee.org/ielx7/6687307/9976263/09810168.pdf","source":{"id":"https://openalex.org/S2484188435","display_name":"IEEE Transactions on Cognitive Communications and Networking","issn_l":"2332-7731","issn":["2332-7731","2372-2045"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cognitive Communications and Networking","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ieeexplore.ieee.org/ielx7/6687307/9976263/09810168.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088141347","display_name":"Mahmoud Said Elsayed","orcid":"https://orcid.org/0000-0003-2416-7481"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Mahmoud Said El Sayed","raw_affiliation_strings":["School of Computer Science, University College Dublin, Dublin, Ireland"],"raw_orcid":"https://orcid.org/0000-0003-2416-7481","affiliations":[{"raw_affiliation_string":"School of Computer Science, University College Dublin, Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073189627","display_name":"Nhien\u2010An Le\u2010Khac","orcid":"https://orcid.org/0000-0003-4373-2212"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Nhien-An Le-Khac","raw_affiliation_strings":["School of Computer Science, University College Dublin, Dublin, Ireland"],"raw_orcid":"https://orcid.org/0000-0003-4373-2212","affiliations":[{"raw_affiliation_string":"School of Computer Science, University College Dublin, Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026193065","display_name":"Marianne A. Azer","orcid":"https://orcid.org/0000-0002-8068-5120"},"institutions":[{"id":"https://openalex.org/I4210165434","display_name":"National Telecommunications Institute","ror":"https://ror.org/05g82f642","country_code":"EG","type":"education","lineage":["https://openalex.org/I4210165434"]},{"id":"https://openalex.org/I57629906","display_name":"Nile University","ror":"https://ror.org/03cg7cp61","country_code":"EG","type":"education","lineage":["https://openalex.org/I57629906"]}],"countries":["EG"],"is_corresponding":false,"raw_author_name":"Marianne A. Azer","raw_affiliation_strings":["National Telecommunication Institute, Nile University, Cairo, Egypt"],"raw_orcid":"https://orcid.org/0000-0002-8068-5120","affiliations":[{"raw_affiliation_string":"National Telecommunication Institute, Nile University, Cairo, Egypt","institution_ids":["https://openalex.org/I4210165434","https://openalex.org/I57629906"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022546955","display_name":"Anca Delia Jurcut","orcid":"https://orcid.org/0000-0002-2705-1823"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Anca D. Jurcut","raw_affiliation_strings":["School of Computer Science, University College Dublin, Dublin, Ireland"],"raw_orcid":"https://orcid.org/0000-0002-2705-1823","affiliations":[{"raw_affiliation_string":"School of Computer Science, University College Dublin, Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":20.1732,"has_fulltext":true,"cited_by_count":175,"citation_normalized_percentile":{"value":0.99693361,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"8","issue":"4","first_page":"1862","last_page":"1880"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7927166223526001},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7595949769020081},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5934049487113953},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.5707636475563049},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.4179944694042206},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.401468962430954},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3079107403755188},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.12869128584861755},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.0875643789768219}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7927166223526001},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7595949769020081},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5934049487113953},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.5707636475563049},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.4179944694042206},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.401468962430954},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3079107403755188},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.12869128584861755},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0875643789768219}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tccn.2022.3186331","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tccn.2022.3186331","pdf_url":"https://ieeexplore.ieee.org/ielx7/6687307/9976263/09810168.pdf","source":{"id":"https://openalex.org/S2484188435","display_name":"IEEE Transactions on Cognitive Communications and Networking","issn_l":"2332-7731","issn":["2332-7731","2372-2045"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cognitive Communications and Networking","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tccn.2022.3186331","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tccn.2022.3186331","pdf_url":"https://ieeexplore.ieee.org/ielx7/6687307/9976263/09810168.pdf","source":{"id":"https://openalex.org/S2484188435","display_name":"IEEE Transactions on Cognitive Communications and Networking","issn_l":"2332-7731","issn":["2332-7731","2372-2045"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cognitive Communications and Networking","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6399999856948853}],"awards":[],"funders":[{"id":"https://openalex.org/F4320320858","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":70,"referenced_works":["https://openalex.org/W1858327386","https://openalex.org/W1988774297","https://openalex.org/W2017524370","https://openalex.org/W2040340473","https://openalex.org/W2067453331","https://openalex.org/W2183397118","https://openalex.org/W2198302135","https://openalex.org/W2230781190","https://openalex.org/W2343828539","https://openalex.org/W2507180882","https://openalex.org/W2584217814","https://openalex.org/W2590373591","https://openalex.org/W2768853466","https://openalex.org/W2769353132","https://openalex.org/W2783146946","https://openalex.org/W2783562033","https://openalex.org/W2789828921","https://openalex.org/W2791319131","https://openalex.org/W2859928566","https://openalex.org/W2884204879","https://openalex.org/W2889109290","https://openalex.org/W2889592383","https://openalex.org/W2904333952","https://openalex.org/W2906238566","https://openalex.org/W2911681169","https://openalex.org/W2911964244","https://openalex.org/W2912370732","https://openalex.org/W2921237497","https://openalex.org/W2924689635","https://openalex.org/W2950540448","https://openalex.org/W2958285686","https://openalex.org/W2964082701","https://openalex.org/W2968455244","https://openalex.org/W2972080240","https://openalex.org/W2973941913","https://openalex.org/W2975191072","https://openalex.org/W2985152984","https://openalex.org/W2995775583","https://openalex.org/W2998008813","https://openalex.org/W3004079980","https://openalex.org/W3008535060","https://openalex.org/W3012454270","https://openalex.org/W3036012999","https://openalex.org/W3037176165","https://openalex.org/W3038154406","https://openalex.org/W3043530913","https://openalex.org/W3048591325","https://openalex.org/W3081430061","https://openalex.org/W3083616926","https://openalex.org/W3084346886","https://openalex.org/W3084413581","https://openalex.org/W3091945716","https://openalex.org/W3097858439","https://openalex.org/W3107769018","https://openalex.org/W3109037541","https://openalex.org/W3117827099","https://openalex.org/W3120450981","https://openalex.org/W3122385627","https://openalex.org/W3159175466","https://openalex.org/W3161554626","https://openalex.org/W3172190353","https://openalex.org/W3175448228","https://openalex.org/W3177795942","https://openalex.org/W3212591162","https://openalex.org/W4247200422","https://openalex.org/W6725058547","https://openalex.org/W6757474584","https://openalex.org/W6758972637","https://openalex.org/W6775245162","https://openalex.org/W6782726016"],"related_works":["https://openalex.org/W2765763546","https://openalex.org/W4386482731","https://openalex.org/W4385302085","https://openalex.org/W2360429410","https://openalex.org/W4390188535","https://openalex.org/W4256682929","https://openalex.org/W335511927","https://openalex.org/W2471811227","https://openalex.org/W2217591390","https://openalex.org/W2157496457"],"abstract_inverted_index":{"Software":[0],"Defined":[1],"Networking":[2],"(SDN)":[3],"is":[4,120],"an":[5],"emerging":[6,59],"network":[7,12,18,24,41,97,103,107,129,259,264],"platform,":[8],"which":[9],"facilitates":[10],"centralised":[11],"management.":[13],"The":[14,34,109,269],"SDN":[15,39,116,179,254,282],"enables":[16],"the":[17,22,29,38,45,58,73,86,93,96,102,126,135,170,182,188,191,197,220,245,248,253,258,273,289],"operators":[19],"to":[20,151,168,218],"manage":[21],"overall":[23],"consistently":[25],"and":[26,43,65,98,134,162,195,216,231,240,256,266],"holistically,":[27],"regardless":[28],"complexity":[30],"of":[31,37,47,79,85,95,101,112,125,128,137,175,190,222,247,263],"infrastructure":[32],"devices.":[33],"promising":[35],"features":[36,130,174,185],"enhance":[40],"security":[42,63],"facilitate":[44],"implementation":[46],"threat":[48],"detection":[49,143,193],"systems":[50],"through":[51],"software":[52],"applications":[53],"using":[54],"open":[55],"APIs.":[56],"However,":[57],"technology":[60],"creates":[61],"new":[62,66],"concerns":[64],"threats":[67],"that":[68,90,272],"do":[69],"not":[70],"exist":[71],"in":[72,118,146,166,178,225,261,281,288],"current":[74],"traditional":[75],"networks.":[76,180],"Distributed":[77],"Denial":[78],"Service":[80],"attacks":[81,89,114,177,224,280],"(DDoS)":[82],"are":[83],"one":[84],"most":[87,100,171,183],"rampant":[88],"can":[91,276],"interrupt":[92],"functionality":[94],"make":[99],"services":[104],"unreachable":[105],"for":[106],"users.":[108],"efficient":[110],"identification":[111],"DDos":[113],"on":[115,210,233,252],"environments":[117,283],"literature":[119],"still":[121],"a":[122,204],"challenge":[123],"because":[124],"number":[127],"taken":[131],"into":[132],"account":[133],"overhead":[136,246],"applying":[138],"machine":[139],"learning":[140],"based":[141,209],"anomaly":[142,192],"techniques.":[144],"Hence,":[145],"this":[147],"paper,":[148],"we":[149,202],"aim":[150],"use":[152],"two":[153],"popular":[154],"feature":[155],"selection":[156],"methods,":[157],"i.e.,":[158,237],"Information":[159],"Gain":[160],"(IG)":[161],"Random":[163],"Forest":[164],"(RF)":[165],"order":[167],"analyse":[169],"comprehensive":[172],"relevant":[173,184],"DDoS":[176,223,279],"Using":[181],"will":[186],"improve":[187],"accuracy":[189],"system":[194],"reduce":[196],"false":[198],"alarm":[199],"rates.":[200],"Moreover,":[201],"propose":[203],"Deep":[205],"Learning":[206],"(DL)":[207],"technique":[208],"Long":[211],"Short":[212],"Term":[213],"Memory":[214],"(LSTM)":[215],"Autoencoder":[217],"tackle":[219],"problem":[221],"SDNs.":[226],"We":[227,242],"perform":[228],"our":[229],"analysis":[230],"evaluation":[232],"three":[234],"different":[235],"datasets,":[236],"InSDN,":[238],"CICIDS2017":[239],"CICIDS2018.":[241],"also":[243],"measure":[244],"proposed":[249],"DL":[250,274],"model":[251],"controller":[255,290],"test":[257],"performance":[260],"terms":[262],"throughput":[265],"end-to-end":[267],"latency.":[268],"results":[270],"validate":[271],"approach":[275],"efficiently":[277],"identify":[278],"without":[284],"any":[285],"significant":[286],"degradation":[287],"performance.":[291]},"counts_by_year":[{"year":2026,"cited_by_count":24},{"year":2025,"cited_by_count":51},{"year":2024,"cited_by_count":53},{"year":2023,"cited_by_count":41},{"year":2022,"cited_by_count":6}],"updated_date":"2026-05-19T21:40:30.786675","created_date":"2025-10-10T00:00:00"}