Denial of Service Detection Mitigation Scheme using Responsive Autonomic Virtual Networks (RAvN)

Allen Starke, Zixiang Nie, Morgan Hodges, Corey Baker, Janise McNair

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

1 Scopus citations

Abstract

In this paper we propose a responsive autonomic and data-driven adaptive virtual networking framework (RAvN) that integrates the adaptive reconfigurable features of a popular SDN platform called open networking operating system (ONOS), the network performance statistics provided by traffic monitoring tools such as T-shark or sflow-RT and analytics and decision making skills provided from new and current machine learning techniques to detect and mitigate anomalous behavior. For this paper we focus on the development of novel detection schemes using a developed Centroid-based clustering technique and the Intragroup variance of data features within network traffic (C. Intra), with a multivariate gaussian distribution model fitted to the constant changes in the IP addresses of the network to accurately assist in the detection of low rate and high rate denial of service (DoS) attacks. We briefly discuss our ideas on the development of the decision-making and execution component using the concept of generating adaptive policy updates (i.e. anomalous mitigation solutions) on-the-fly to the ONOS SDN controller for updating network configurations and flows. In addition we provide the analysis on anomaly detection schemes used for detecting low rate and high rate DoS attacks versus a commonly used unsupervised machine learning technique Kmeans. The proposed schemes outperformed Kmeans significantly. The multivariate clustering method and the intragroup variance recorded 80.54% and 96.13% accuracy respectively while Kmeans recorded 72.38% accuracy.

Original languageEnglish
Title of host publicationMILCOM 2019 - 2019 IEEE Military Communications Conference
ISBN (Electronic)9781728142807
DOIs
StatePublished - Nov 2019
Event2019 IEEE Military Communications Conference, MILCOM 2019 - Norfolk, United States
Duration: Nov 12 2019Nov 14 2019

Publication series

NameProceedings - IEEE Military Communications Conference MILCOM
Volume2019-November

Conference

Conference2019 IEEE Military Communications Conference, MILCOM 2019
Country/TerritoryUnited States
CityNorfolk
Period11/12/1911/14/19

Bibliographical note

Publisher Copyright:
© 2019 IEEE.

Keywords

  • machine learning
  • software-defined networks

ASJC Scopus subject areas

  • Electrical and Electronic Engineering

Fingerprint

Dive into the research topics of 'Denial of Service Detection Mitigation Scheme using Responsive Autonomic Virtual Networks (RAvN)'. Together they form a unique fingerprint.

Cite this