An Adam-Optimised Deep Neural Net for Predicting Vulnerability Attack in Software Defined Networking


  • Umar Abdullahi Umar Department of Mathematics and Computer Science, Faculty of Natural and Applied Sciences, Sule Lamido University 048 SLU Kafin Hausa, Jigawa, Nigeria.
  • Babangida Isyaku Department of Mathematics and Computer Science, Faculty of Natural and Applied Sciences, Sule Lamido University 048 SLU Kafin Hausa, Jigawa, Nigeria.
  • Isa Modibbo Ismail Department of Mathematics and Computer Science, Faculty of Natural and Applied Sciences, Sule Lamido University 048 SLU Kafin Hausa, Jigawa, Nigeria.



The potentiality of Software Defined networking (SDN) made network management easier through the centralize controller. Therefore, SDN is a rule-based network instead of destination based used in the legacy router. The behavior of the entire network strongly depends on the forwarding rules installed in the switch logical data structure called flowtable. Arrival of traffic flows forces switch to trigger packet-in event to request for the installation of correspondent flows. Traffic flows arrive in the switch more frequent, in this way the number of events also augment. Unfortunately, the switch memory resource is constraint which cannot accommodate the number of active networks which in turn increases the chances of flowtable overflow.Therefore,anattacker leverage on the overflow to lunch several types of attack which include DoS attack thus, cause SDN Controller security concern.Consequently, avert writing forwarding rules from to legitimate clients. This call for predictive model to detect and verify rules before installation. This work proposed a predictive model that builds an-end to end machine learning based predictive model for detecting SDN Controller vulnerability. NSL KDD Dataset was used as training and validation dataset to preprocessand build the model. A number ofbenchmarks NN parameters were used to measure and tune the performance of the proposed model. A prediction accuracy of about 97% accuracy was obtained on the validation set. The individual identification of each attack benefits in applying the mitigation technique to prevent the specific type of traffic flows responsible for the attack, this analysis is based on a single source of real network traffic.


Ahmed, A., Park, K., & Baeg, S. (2017). Resource-Efficient SRAM-Based Ternary Content Addressable Memory. IEEE Transactions on Very Large Scale Integration (VLSI) Systems, 25(4), 1583–1587.

Correa Chica, J. C., Imbachi, J. C., & Botero Vega, J. F. (2020). Security in SDN: A comprehensive survey. Journal of Network and Computer Applications, 159(November 2019), 102595.

Dridi, L., & Zhani, M. F. (2018). A holistic approach to mitigating DoS attacks in SDN networks. International Journal of Network Management, 28(1), 1–14.

Elsayed, M. S., Le-Khac, N.-A., Dev, S., & Jurcut, A. D. (2020). DDoSNet: A Deep-Learning Model for Detecting Network Attacks. CoRR, abs/2006.1.

Elsayed, M. S., Le-Khac, N.-A., Dev, S., & Jurcut, A. D. (2019). Machine-Learning Techniques for Detecting Attacks in SDN. 2019 IEEE 7th International Conference on Computer Science and Network Technology (ICCSNT), 277–281.

Isyaku, B., Kamat, M. B., Abu Bakar, K. Bin, Mohd Zahid, M. S., & Ghaleb, F. A. (2020). IHTA: Dynamic Idle-Hard Timeout Allocation Algorithm based OpenFlow Switch. ISCAIE 2020 - IEEE 10th Symposium on Computer Applications and Industrial Electronics, 170–175.

J. Clement. (2020). Global mobile data traffic 2017-2022.

Kim, E. Do, Choi, Y., Lee, S. I., & Kim, H. J. (2017). Enhanced flow table management scheme with an LRU-based caching algorithm for SDN. IEEE Access, 5, 25555–25564.

Kingma, D. P., & Ba, J. (2014). Adam: A Method for Stochastic Optimization. International Conference on Learning Representations.

Lee, S., Kim, J., Shin, S., Porras, P., & Yegneswaran, V. (2017). Athena: A Framework for Scalable Anomaly Detection in Software-Defined Networks. 2017 47th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), 249–260.

Lu, M., Deng, W., & Shi, Y. (2016). TF-IdleTimeout: Improving efficiency of TCAM in SDN by dynamically adjusting flow entry lifecycle. 2016 IEEE International Conference on Systems, Man, and Cybernetics (SMC), 002681–002686.

Luo, H., Li, W., Qian, Y., & Dou, L. (2018). Mitigating SDN Flow Table Overflow. 2018 IEEE 42nd Annual Computer Software and Applications Conference (COMPSAC), 19(6), 821–822.

Nguyen, T. N. (2018). The Challenges in SDN/ML Based Network Security : A Survey. IEEE Internet of Things Journal, 5(6), 4829–4842.

Polat, H., Polat, O., & Cetin, A. (2020). Detecting DDoS Attacks in Software-Defined Networks Through Feature Selection Methods and Machine Learning Models. Sustainability, 12(3), 1035.

Song, C., Park, Y., Golani, K., Kim, Y., Bhatt, K., & Goswami, K. (2017). Machine-Learning Based Threat-Aware System in Software Defined Networks. 2017 26th International Conference on Computer Communication and Networks (ICCCN), 1–9.

Sultana, N., Chilamkurti, N., Peng, W., & Alhadad, R. (2019). Survey on SDN based network intrusion detection system using machine learning approaches. Peer-to-Peer Networking and Applications, 12(2), 493–501.

Tang, T. A., Mhamdi, L., McLernon, D., Zaidi, S. A. R., & Ghogho, M. (2018). Deep Recurrent Neural Network for Intrusion Detection in SDN-based Networks. 2018 4th IEEE Conference on Network Softwarization and Workshops (NetSoft), 202–206.

Tavallaee, M., Bagheri, E., Lu, W., & Ghorbani, A. A. (2009). A detailed analysis of the KDD CUP 99 data set. 2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications, 1–6.

Yan, B., Xu, Y., & Chao, H. J. (2018). Adaptive Wildcard Rule Cache Management for Software-Defined Networks. IEEE/ACM Transactions on Networking, 26(2), 962–975.

Yang, B., Wu, Y., Chu, X., & Song, G. (2016). Seamless Handover in Software-Defined Satellite Networking. IEEE Communications Letters, 20(9), 1768–1771.

Zahid, M. S. M., Isyaku, B., & Fadzil, F. A. (2017). Recovery of Software Defined Network from Multiple Failures: Openstate Vs Openflow. 2017 IEEE/ACS 14th International Conference on Computer Systems and Applications (AICCSA), 1178–1183.

Zhang, H., Cai, Z., Liu, Q., Xiao, Q., Li, Y., & Cheang, C. F. (2018). A Survey on Security-Aware Measurement in SDN. Security and Communication Networks, 2018.

Zhou, Y., Chen, K., Zhang, J., Leng, J., & Tang, Y. (2018). Exploiting the Vulnerability of Flow Table Overflow in Software-Defined Network: Attack Model, Evaluation, and Defense. Security and Communication Networks, 2018, 1–15.