Network Threat Detection Using Machine/Deep Learning in SDN-Based Platforms: A Comprehensive Analysis of State-of-the-Art Solutions, Discussion, Challenges, and Future Research Direction.

Journal: Sensors (Basel, Switzerland)
Published Date:

Abstract

A revolution in network technology has been ushered in by software defined networking (SDN), which makes it possible to control the network from a central location and provides an overview of the network's security. Despite this, SDN has a single point of failure that increases the risk of potential threats. Network intrusion detection systems (NIDS) prevent intrusions into a network and preserve the network's integrity, availability, and confidentiality. Much work has been done on NIDS but there are still improvements needed in reducing false alarms and increasing threat detection accuracy. Recently advanced approaches such as deep learning (DL) and machine learning (ML) have been implemented in SDN-based NIDS to overcome the security issues within a network. In the first part of this survey paper, we offer an introduction to the NIDS theory, as well as recent research that has been conducted on the topic. After that, we conduct a thorough analysis of the most recent ML- and DL-based NIDS approaches to ensure reliable identification of potential security risks. Finally, we focus on the opportunities and difficulties that lie ahead for future research on SDN-based ML and DL for NIDS.

Authors

  • Naveed Ahmed
    School of Computing, Faculty of Engineering, Universiti Teknologi Malaysia, Johor Bahru 81310, Johor, Malaysia.
  • Asri Bin Ngadi
    School of Computing, Faculty of Engineering, Universiti Teknologi Malaysia, Johor Bahru 81310, Johor, Malaysia.
  • Johan Mohamad Sharif
    School of Computing, Faculty of Engineering, Universiti Teknologi Malaysia, Johor Bahru 81310, Johor, Malaysia.
  • Saddam Hussain
    School of Electrical Engineering, University Technology Malaysia, Johor Bahru 81310, Malaysia.
  • Mueen Uddin
    Department of Information Systems, Faculty of Engineering, Effat University, Jeddah, Saudi Arabia.
  • Muhammad Siraj Rathore
    Department of Computer Science, Capital University of Science and Technology, Islamabad 44000, Pakistan.
  • Jawaid Iqbal
    Department of Computer Science, Capital University of Science and Technology, Islamabad 44000, Pakistan.
  • Maha Abdelhaq
    School of Computer Science, Faculty of Information Science and Technology, University Kebangsaan Malaysia (UKM), 43600, Bangi, Selangor, Malaysia.
  • Raed Alsaqour
    School of Computer Science, Faculty of Information Science and Technology, University Kebangsaan Malaysia (UKM), 43600, Bangi, Selangor, Malaysia.
  • Syed Sajid Ullah
    Department of Information and Communication Technology, University of Agder, Kristiansand, Norway.
  • Fatima Tul Zuhra
    School of Computing, Faculty of Engineering, Universiti Teknologi Malaysia, Johor Bahru 81310, Johor, Malaysia.