Detecting DDoS attacks using machine learning algorithms and feature selection methods

Abstract: A Distributed Denial of Service (DDoS) attack occurs when an attacker tries to disrupt a network, service or website by flooding huge numbers of packets on the internet traffic. Detecting DDoS attacks serves the goal of spotting and addressing them promptly to reduce their effects on the network, system or service being targeted. Detecting Distributed Denial of Service (DDoS) attacks is crucial, for people, companies and network managers. The detection of DDoS attacks has ranging uses in industries such as network security safeguarding websites, managing cloud services ensuring the security of online systems and services. Detecting DDoS attacks is essential for safeguarding infrastructure upholding service availability and guaranteeing the security of online systems and services. To achieve this objective, we proposed a framework to detect DDoS attacks including six steps. In step one, we start by gathering information, which includes network activity and system records, for operations as well as instances of DDoS attacks. Step two, we identify characteristics of the data collected such as patterns in network traffic, packet details, IP addresses, types of protocols used and more. Step three, we utilize algorithms for feature selection such as Salp Swarm Algorithm (SSA), Gray Wolf Algorithm (GWA), Particle Swarm Algorithm (PSO) to pinpoint the features that can distinguish between normal activities and DDoS attack patterns. After that in step four, we divide the processed dataset into sections for training and testing purposes to develop and assess the machine learning models such as SVM (support vector machine), and KNN (K-nearest neighbor). Step five we develop a classification model using machine learning techniques like decision trees, forests, support vector machines (SVM) logistic regression models or neural networks. Finally, we assess the effectiveness of models through metrics such as accuracy rates, precision levels, recall rates, and F1 scores. The results show that the proposed models achieve high results (99.9%). In summary detecting DDoS attacks is crucial for protecting networks, systems and online services against disruptions.

How to cite this paper

 Almaiah, M., Alrawashdeh, R., Alkhdour, T., Al-Ali, R., Rjoub, G & Aldahyani, T. (2024). Detecting DDoS attacks using machine learning algorithms and feature selection methods.International Journal of Data and Network Science, 8(4), 2307-2318.

Refrences

Ahmad, R., Wazirali, R., Bsoul, Q., Abu-Ain, T., & Abu-Ain, W. (2021). Feature-selection and mutual-clustering ap-proaches to improve DoS detection and maintain WSNs’ lifetime. Sensors, 21(14), 4821.‏
Alahmadi, A. A., Aljabri, M., Alhaidari, F., Alharthi, D. J., Rayani, G. E., Marghalani, L. A., ... & Bajandouh, S. A. (2023). DDoS Attack Detection in IoT-Based Networks Using Machine Learning Models: A Survey and Research Direc-tions. Electronics, 12(14), 3103.‏
Aljuhani, A. (2021). Machine learning approaches for combating distributed denial of service attacks in modern network-ing environments. IEEE Access, 9, 42236-42264.‏
Alzahrani, R. J., & Alzahrani, A. (2021). Security analysis of DDoS attacks using machine learning algorithms in net-works traffic. Electronics, 10(23), 2919.‏
Anirudh, M., Thileeban, S. A., & Nallathambi, D. J. (2017, January). Use of honeypots for mitigating DoS attacks targeted on IoT networks. In 2017 International conference on computer, communication and signal processing (ICCCSP) (pp. 1-4). IEEE.
Fauzi, M. A., Hanuranto, A. T., & Setianingsih, C. (2020, October). Intrusion detection system using genetic algorithm and K-NN algorithm on dos attack. In 2020 2nd International Conference on Cybernetics and Intelligent System (ICO-RIS) (pp. 1-6). IEEE.‏
Halim, Z., Yousaf, M. N., Waqas, M., Sulaiman, M., Abbas, G., Hussain, M., ... & Hanif, M. (2021). An effective genetic algorithm-based feature selection method for intrusion detection systems. Computers & Security, 110, 102448.‏
Iftikhar, S., Al-Madani, D., Abdullah, S., Saeed, A., & Fatima, K. (2023). A supervised feature selection method for mali-cious intrusions detection in IoT based on genetic algorithm. International Journal of Computer Science & Network Security, 23(3), 49-56.‏
Lee, S. H., Shiue, Y. L., Cheng, C. H., Li, Y. H., & Huang, Y. F. (2022). Detection and prevention of DDoS attacks on the IoT. Applied Sciences, 12(23), 12407.
Liu, X., & Du, Y. (2023). Towards effective feature selection for iot botnet attack detection using a genetic algo-rithm. Electronics, 12(5), 1260.‏
Marvi, M., Arfeen, A., & Uddin, R. (2021). A generalized machine learning‐based model for the detection of DDoS at-tacks. International Journal of Network Management, 31(6), e2152.‏
Mohmand, M. I., Hussain, H., Khan, A. A., Ullah, U., Zakarya, M., Ahmed, A., ... & Haleem, M. (2022). A machine learn-ing-based classification and prediction technique for DDoS attacks. IEEE Access, 10, 21443-21454.‏
Mohsin, A. H., Zaidan, A. A., Zaidan, B. B., Mohammed, K. I., Albahri, O. S., Albahri, A. S., & Alsalem, M. A. (2021). PSO–Blockchain-based image steganography: towards a new method to secure updating and sharing COVID-19 data in decentralised hospitals intelligence architecture. Multimedia tools and applications, 80, 14137-14161.‏
Norouzi, M., Gürkaş-Aydın, Z., Turna, Ö. C., Yağci, M. Y., Aydin, M. A., & Souri, A. (2023). A Hybrid Genetic Algo-rithm-Based Random Forest Model for Intrusion Detection Approach in Internet of Medical Things. Applied Scienc-es, 13(20), 11145.‏
Onah, J. O., Abdullahi, M., Hassan, I. H., & Al-Ghusham, A. (2021). Genetic Algorithm based feature selection and Naïve Bayes for anomaly detection in fog computing environment. Machine Learning with applications, 6, 100156.‏
Ray, S., Mishra, K. N., & Dutta, S. (2022). Detection and prevention of DDoS attacks on M-healthcare sensitive data: a novel approach. International Journal of Information Technology, 14(3), 1333-1341.‏
Seifousadati, A., Ghasemshirazi, S., & Fathian, M. (2021). A Machine Learning approach for DDoS detection on IoT de-vices. arXiv preprint arXiv:2110.14911.‏
Trab, S., Bajic, E., Zouinkhi, A., Abdelkrim, M. N., & Chekir, H. (2018). RFID IoT-enabled warehouse for safety man-agement using product class-based storage and potential fields methods. International Journal of Embedded Sys-tems, 10(1), 71-88.‏
Ullah, S., Mahmood, Z., Ali, N., Ahmad, T., & Buriro, A. (2023). Machine learning-based dynamic attribute selection technique for ddos attack classification in iot networks. Computers, 12(6), 115.‏
Zhao, J., Xu, M., Chen, Y., & Xu, G. (2023). A DNN architecture generation method for DDoS detection via genetic alogrithm. Future Internet, 15(4), 122.‏