Federated Learning-Based Security Attack Detection for Multi-Controller Software-Defined Networks

作者：Abrar Omar Alkhamisi, Iyad Katib, Seyed M. Buhari · 发表于：Algorithms · 年份：2024 · DOI：10.3390/a17070290 · 被引用次数：13 · 研究领域：Software-Defined Networks and 5G、Network Security and Intrusion Detection、Advanced Memory and Neural Computing

A revolutionary concept of Multi-controller Software-Defined Networking (MC-SDN) is a promising structure for pursuing an evolving complex and expansive large-scale modern network environment. Despite the rich operational flexibility of MC-SDN, it is imperative to protect the network deployment against potential vulnerabilities that lead to misuse and malicious activities on data planes. The security holes in the MC-SDN significantly impact network survivability, and subsequently, the data plane is vulnerable to potential security threats and unintended consequences. Accordingly, this work intends to design a Federated learning-based Security (FedSec) strategy that detects the MC-SDN attack. The FedSec ensures packet routing services among the nodes by maintaining a flow table frequently updated according to the global model knowledge. By executing the FedSec algorithm only on the network-centric nodes selected based on importance measurements, the FedSec reduces the system complexity and enhances attack detection and classification accuracy. Finally, the experimental results illustrate the significance of the proposed FedSec strategy regarding various metrics.