{"id":"https://openalex.org/W3047861058","doi":"https://doi.org/10.1109/tnsm.2020.3014870","title":"Bringing Intelligence to Software Defined Networks: Mitigating DDoS Attacks","display_name":"Bringing Intelligence to Software Defined Networks: Mitigating DDoS Attacks","publication_year":2020,"publication_date":"2020-08-06","ids":{"openalex":"https://openalex.org/W3047861058","doi":"https://doi.org/10.1109/tnsm.2020.3014870","mag":"3047861058"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2020.3014870","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2020.3014870","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069783617","display_name":"Zakaria Abou El Houda","orcid":"https://orcid.org/0000-0002-2893-1101"},"institutions":[{"id":"https://openalex.org/I140494188","display_name":"Universit\u00e9 de Technologie de Troyes","ror":"https://ror.org/01qhqcj41","country_code":"FR","type":"education","lineage":["https://openalex.org/I140494188"]},{"id":"https://openalex.org/I70931966","display_name":"Universit\u00e9 de Montr\u00e9al","ror":"https://ror.org/0161xgx34","country_code":"CA","type":"education","lineage":["https://openalex.org/I70931966"]}],"countries":["CA","FR"],"is_corresponding":false,"raw_author_name":"Zakaria Abou El Houda","raw_affiliation_strings":["ICD/ERA, University of Technology of Troyes, Troyes, France","NRL, University of Montreal, Montreal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0002-2893-1101","affiliations":[{"raw_affiliation_string":"ICD/ERA, University of Technology of Troyes, Troyes, France","institution_ids":["https://openalex.org/I140494188"]},{"raw_affiliation_string":"NRL, University of Montreal, Montreal, QC, Canada","institution_ids":["https://openalex.org/I70931966"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042499396","display_name":"Lyes Khoukhi","orcid":"https://orcid.org/0000-0002-1922-769X"},"institutions":[{"id":"https://openalex.org/I194210350","display_name":"\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs de Caen","ror":"https://ror.org/01fpqqe90","country_code":"FR","type":"education","lineage":["https://openalex.org/I194210350","https://openalex.org/I4210105918"]},{"id":"https://openalex.org/I4210139483","display_name":"GREYC","ror":"https://ror.org/043749971","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I194210350","https://openalex.org/I4210105918","https://openalex.org/I4210105918","https://openalex.org/I4210139483","https://openalex.org/I4210159245","https://openalex.org/I98702875"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Lyes Khoukhi","raw_affiliation_strings":["GREYC, ENSICAEN, Caen, France"],"raw_orcid":"https://orcid.org/0000-0002-1922-769X","affiliations":[{"raw_affiliation_string":"GREYC, ENSICAEN, Caen, France","institution_ids":["https://openalex.org/I194210350","https://openalex.org/I4210139483"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055329164","display_name":"Abdelhakim Hafid","orcid":"https://orcid.org/0000-0001-8597-7344"},"institutions":[{"id":"https://openalex.org/I70931966","display_name":"Universit\u00e9 de Montr\u00e9al","ror":"https://ror.org/0161xgx34","country_code":"CA","type":"education","lineage":["https://openalex.org/I70931966"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Abdelhakim Senhaji Hafid","raw_affiliation_strings":["NRL, University of Montreal, Montreal, QC, Canada","Department of Computer Science and Operational Research, NRL, University of Montreal, Montreal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0001-8597-7344","affiliations":[{"raw_affiliation_string":"NRL, University of Montreal, Montreal, QC, Canada","institution_ids":["https://openalex.org/I70931966"]},{"raw_affiliation_string":"Department of Computer Science and Operational Research, NRL, University of Montreal, Montreal, QC, Canada","institution_ids":["https://openalex.org/I70931966"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.039,"has_fulltext":false,"cited_by_count":81,"citation_normalized_percentile":{"value":0.96376125,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"17","issue":"4","first_page":"2523","last_page":"2535"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8386569023132324},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7462383508682251},{"id":"https://openalex.org/keywords/domain-name-system","display_name":"Domain Name System","score":0.6816228628158569},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6294946074485779},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5640414953231812},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.5254810452461243},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5092684030532837},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4825719892978668},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.4575587213039398},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.42975887656211853},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.4211123585700989},{"id":"https://openalex.org/keywords/trinoo","display_name":"Trinoo","score":0.41102293133735657},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09727218747138977}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8386569023132324},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7462383508682251},{"id":"https://openalex.org/C35026560","wikidata":"https://www.wikidata.org/wiki/Q8767","display_name":"Domain Name System","level":3,"score":0.6816228628158569},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6294946074485779},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5640414953231812},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.5254810452461243},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5092684030532837},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4825719892978668},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4575587213039398},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.42975887656211853},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.4211123585700989},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.41102293133735657},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09727218747138977}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2020.3014870","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2020.3014870","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.47999998927116394,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W1579303078","https://openalex.org/W1583113493","https://openalex.org/W1969449821","https://openalex.org/W1975936173","https://openalex.org/W1989454965","https://openalex.org/W2017524370","https://openalex.org/W2074623901","https://openalex.org/W2079145130","https://openalex.org/W2123659539","https://openalex.org/W2135195977","https://openalex.org/W2163375756","https://openalex.org/W2167531746","https://openalex.org/W2183397118","https://openalex.org/W2275015310","https://openalex.org/W2293796414","https://openalex.org/W2536380892","https://openalex.org/W2551234118","https://openalex.org/W2557203772","https://openalex.org/W2599515429","https://openalex.org/W2601677968","https://openalex.org/W2612104483","https://openalex.org/W2617095022","https://openalex.org/W2767197769","https://openalex.org/W2782978729","https://openalex.org/W2789780249","https://openalex.org/W2804817434","https://openalex.org/W2857891774","https://openalex.org/W2888231574","https://openalex.org/W2888977251","https://openalex.org/W2895216609","https://openalex.org/W2906784802","https://openalex.org/W2916706563","https://openalex.org/W2921487330","https://openalex.org/W2926903444","https://openalex.org/W2963129815","https://openalex.org/W3010495106","https://openalex.org/W3045959720","https://openalex.org/W3144467696","https://openalex.org/W4285719527","https://openalex.org/W6678516353","https://openalex.org/W6759743798"],"related_works":["https://openalex.org/W2733931179","https://openalex.org/W1642214788","https://openalex.org/W2783466926","https://openalex.org/W2001331025","https://openalex.org/W2292210693","https://openalex.org/W2887235364","https://openalex.org/W3132742126","https://openalex.org/W2063104870","https://openalex.org/W2276629685","https://openalex.org/W2942864670"],"abstract_inverted_index":{"As":[0],"one":[1,25,61],"of":[2,7,10,26,45,58,62,67,104,140,151,208,219,238],"the":[3,27,39,63,68,101,105,138,217],"most":[4,64],"devastating":[5],"types":[6],"Distributed":[8],"Denial":[9],"Service":[11],"(DDoS)":[12],"attacks,":[13],"Domain":[14],"Name":[15],"System":[16],"(DNS)":[17],"amplification":[18,135,283,305],"attack":[19,136,284,306],"represents":[20],"a":[21,43,56,161,192,299,308],"big":[22],"threat":[23],"and":[24,107,126,149,155,164,175,224,241,258,294],"main":[28],"Internet":[29,40],"security":[30],"problems":[31],"to":[32,53,77,96,131,168,198,215,235,249,264,276,302],"nowadays":[33],"networks.":[34],"Many":[35],"protocols":[36],"that":[37,47],"form":[38],"infrastructure":[41],"expose":[42],"set":[44,57],"vulnerabilities":[46],"can":[48,279],"be":[49],"exploited":[50],"by":[51,181],"attackers":[52,99],"carry":[54],"out":[55],"attacks.":[59],"DNS,":[60],"critical":[65],"elements":[66],"Internet,":[69],"is":[70,75],"among":[71],"these":[72],"protocols.":[73],"It":[74],"vulnerable":[76],"DDoS":[78,195],"attacks":[79,93],"mainly":[80],"because":[81,98],"all":[82],"exchanges":[83],"in":[84,137,200,221,307],"this":[85,120],"protocol":[86],"use":[87],"User":[88],"Datagram":[89],"Protocol":[90],"(UDP).":[91],"These":[92],"are":[94],"difficult":[95],"defeat":[97],"spoof":[100],"IP":[102],"address":[103],"victim":[106],"flood":[108],"him":[109],"with":[110,286],"valid":[111],"DNS":[112,117,134,153,173,176,189,203,256,260,268,282,304],"responses":[113],"coming":[114],"from":[115],"legitimate":[116,184],"servers.":[118],"In":[119],"paper,":[121],"we":[122],"propose":[123],"an":[124,222],"efficient":[125,223],"scalable":[127,225],"solution,":[128],"called":[129],"WisdomSDN,":[130],"effectively":[132,265,280],"mitigate":[133,266,303],"context":[139],"software":[141],"defined":[142],"networks":[143],"(SDN).":[144],"WisdomSDN":[145,157,278],"covers":[146],"both":[147],"detection":[148,196,288],"mitigation":[150],"illegitimate":[152,188,202,255,267],"requests":[154,174],"responses.":[156],"consists":[158,207],"of:":[159],"(1)":[160],"novel":[162],"proactive":[163],"stateful":[165],"scheme":[166,213,233,247,262],"(PAS)":[167],"perform":[169],"one-to-one":[170],"mapping":[171],"between":[172],"responses;":[177,190],"it":[178,298],"operates":[179],"proactively":[180],"sending":[182],"only":[183],"responses,":[185],"excluding":[186],"amplified":[187],"(2)":[191],"machine":[193],"learning":[194],"module":[197,206],"detect,":[199],"real-time,":[201],"requests.":[204,269],"This":[205],"(a)":[209],"Flow":[210],"statistics":[211],"collection":[212],"(FSC)":[214],"gather":[216],"features":[218],"flows":[220],"way":[226],"using":[227],"sFlow":[228],"protocol;":[229],"(b)":[230],"Entropy":[231],"calculation":[232],"(ECS)":[234],"measure":[236],"randomness":[237],"network":[239],"traffic;":[240],"(c)":[242],"Bayes":[243],"Network":[244],"based":[245,251],"Filtering":[246],"(BNF)":[248],"classify,":[250],"on":[252],"entropy":[253],"values,":[254],"requests;":[257],"(3)":[259],"Mitigation":[261],"(DM)":[263],"The":[270],"experimental":[271],"results":[272],"show":[273],"that,":[274],"compared":[275],"state-of-art,":[277],"detect/mitigate":[281],"quickly":[285],"high":[287],"rate,":[289,293],"less":[290],"false":[291],"positive":[292],"low":[295],"overhead":[296],"making":[297],"promising":[300],"solution":[301],"SDN":[309],"environment.":[310]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":16},{"year":2023,"cited_by_count":15},{"year":2022,"cited_by_count":14},{"year":2021,"cited_by_count":13},{"year":2020,"cited_by_count":3}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}