Machine Learning with Service Classification for Detecting Control Plane Intrusions in Software Defined Optical Networks

Exploring machine-learning-based control plane intrusion detection techniques in software defined optical networks

Optical Fiber Technology ◽

10.1016/j.yofte.2017.09.023 ◽

2017 ◽

Vol 39 ◽

pp. 37-42 ◽

Cited By ~ 10

Author(s):

Huibin Zhang ◽

Yuqiao Wang ◽

Haoran Chen ◽

Yongli Zhao ◽

Jie Zhang

Keyword(s):

Machine Learning ◽

Intrusion Detection ◽

Optical Networks ◽

Control Plane ◽

Detection Techniques

Download Full-text

Demonstration of machine-learning-assisted security monitoring in optical networks

45th European Conference on Optical Communication (ECOC 2019) ◽

10.1049/cp.2019.1189 ◽

2019 ◽

Author(s):

M. Furdek ◽

C. Natalino ◽

F. Lipp ◽

D. Hock ◽

N. Aerts ◽

...

Keyword(s):

Machine Learning ◽

Optical Networks ◽

Security Monitoring

Download Full-text

Enhancing Lightpath QoT Computation With Machine Learning in Partially Disaggregated Optical Networks

IEEE Open Journal of the Communications Society ◽

10.1109/ojcoms.2021.3066913 ◽

2021 ◽

Vol 2 ◽

pp. 564-574

Author(s):

Andrea D'Amico ◽

Stefano Straullu ◽

Giacomo Borraccini ◽

Elliot London ◽

Stefano Bottacchi ◽

...

Keyword(s):

Machine Learning ◽

Optical Networks

Download Full-text

Machine Learning Classification and Regression Approaches for Optical Network Traffic Prediction

Electronics ◽

10.3390/electronics10131578 ◽

2021 ◽

Vol 10 (13) ◽

pp. 1578

Author(s):

Daniel Szostak ◽

Adam Włodarczyk ◽

Krzysztof Walkowiak

Keyword(s):

Machine Learning ◽

Optical Networks ◽

Network Traffic ◽

Optical Network ◽

Optimization Methods ◽

Supervised Machine Learning ◽

Traffic Prediction ◽

Machine Learning Classification ◽

Classification And Regression ◽

Network Technologies

Rapid growth of network traffic causes the need for the development of new network technologies. Artificial intelligence provides suitable tools to improve currently used network optimization methods. In this paper, we propose a procedure for network traffic prediction. Based on optical networks’ (and other network technologies) characteristics, we focus on the prediction of fixed bitrate levels called traffic levels. We develop and evaluate two approaches based on different supervised machine learning (ML) methods—classification and regression. We examine four different ML models with various selected features. The tested datasets are based on real traffic patterns provided by the Seattle Internet Exchange Point (SIX). Obtained results are analyzed using a new quality metric, which allows researchers to find the best forecasting algorithm in terms of network resources usage and operational costs. Our research shows that regression provides better results than classification in case of all analyzed datasets. Additionally, the final choice of the most appropriate ML algorithm and model should depend on the network operator expectations.

Download Full-text

An intelligent flow-based and signature-based IDS for SDNs using ensemble feature selection and a multi-layer machine learning-based classifier

Journal of Intelligent & Fuzzy Systems ◽

10.3233/jifs-200850 ◽

2020 ◽

pp. 1-20

Author(s):

K. Muthamil Sudar ◽

P. Deepalakshmi

Keyword(s):

Machine Learning ◽

Feature Selection ◽

Intrusion Detection ◽

Intrusion Detection System ◽

Network Architecture ◽

Detection System ◽

Software Defined Networking ◽

Control Plane ◽

Control Logic ◽

Data Plane

Software-defined networking is a new paradigm that overcomes problems associated with traditional network architecture by separating the control logic from data plane devices. It also enhances performance by providing a highly-programmable interface that adapts to dynamic changes in network policies. As software-defined networking controllers are prone to single-point failures, providing security is one of the biggest challenges in this framework. This paper intends to provide an intrusion detection mechanism in both the control plane and data plane to secure the controller and forwarding devices respectively. In the control plane, we imposed a flow-based intrusion detection system that inspects every new incoming flow towards the controller. In the data plane, we assigned a signature-based intrusion detection system to inspect traffic between Open Flow switches using port mirroring to analyse and detect malicious activity. Our flow-based system works with the help of trained, multi-layer machine learning-based classifier, while our signature-based system works with rule-based classifiers using the Snort intrusion detection system. The ensemble feature selection technique we adopted in the flow-based system helps to identify the prominent features and hasten the classification process. Our proposed work ensures a high level of security in the Software-defined networking environment by working simultaneously in both control plane and data plane.

Download Full-text