An Efficient Hybrid-DNN for DDoS Detection and Classification in Software-Defined IIoT Networks

Abstract

Software-Defined Networking (SDN)-based Industrial Internet of Things (IIoT) networks have a centralized controller that is a single attractive target for unauthorized users to attack. Cybersecurity in IIoT networks is becoming the most significant challenge, especially from increasingly sophisticated Distributed Denial-of-Service (DDoS) attacks. This situation necessitates efficient approaches to mitigate recent attacks following the incompetence of existing techniques that focus more on DDoS detection. Most existing DDoS detection capabilities are computationally complex and are no longer efficient enough to protect against DDoS attacks. Thus, the need for a low-cost approach for DDoS attack classification. This study presents a competent feature selection method Extreme Gradient Boosting (XGBoost) for determining the most relevant data features with a hybrid Convolutional Neural Network and Long Short-Term Memory (CNN-LSTM) for DDoS attack classification. The proposed model evaluated the CICDDoS2019 dataset with improved accuracy and low-complexity capability for low latency IIoT requirements. Performance results show that the proposed model achieves a high accuracy of 99.50% with a time cost of 0.179 ms.