Search

While software-defined networks (SDNs) were introduced to enhance the performance of traditional networks, they brought forth significant challenges, such as lack of scalability, low reliability, and the presence of a centralized controller as a single point of failure. This led to the emergence of distributed software-defined networks (DSDNs). Despite the numerous advantages of DSDNs, there are challenges, with improper traffic distribution identified as the primary issue, significantly affecting its performance and efficiency, resulting in increased latency, reduced throughput, and migration costs. This article introduces a novel approach called MBL-DSDN (micro-clustering bidirectional LSTM-DSDN) to balance server traffic distribution. The improvement of quality of service (QoS) parameters and optimal load distribution in DSDNs is accomplished by utilizing two modules: micro-clustering (MC) and a prediction module based on the B-LSTM method. The Davies–Bouldin (DB) index from the MC module is utilized to enhance the accuracy of clustering results. Since the B-LSTM prediction module possesses suitable memory to store all relevant past and future features with high precision, it is suitable for selecting the best controller with the lowest migration cost and response time. Moreover, the proposed method reduces the synchronization cost between data and controller layers, leading to reduced response time and, ultimately, lower processing costs and increased load balancing. In comparison with similar methods, as a result of multiple simulations, migration count, migration cost, and response time parameters have improved by 31%, 43%, and 40.5%, respectively. [ABSTRACT FROM AUTHOR]

Flow admission control (FAC) aims to efficiently manage the service requests while maximizing the network utilization. With multiple connection requests, access delay or even service interruption may occur. This paper proposes a novel FAC approach to reduce the contention between the end nodes and ensure high utilization of the networking resources for software defined IIoT. First, incoming flows are classified into different priorities using back propagation neural network based on selected features representing the current network status. Second, with the designed flow admission policies, bandwidth and buffer size are estimated with stochastic network calculus model. Finally, the thresholds of the proposed FAC scheme are dynamically decided based on the above two parameters. Various flows are admitted or rejected via the proposed FAC to maintain real time processing. Unlike traditional FAC schemes rely on static priority systems, the proposed scheme leverages machine learning technique for dynamic flow prioritization and the stochastic network calculus model for precise estimation. Computer simulation reveals that the proposed scheme accurately classifies the flows, and substantially decreases the transmission delay and improves the network utilization compared to the existing FAC schemes. This highlights the superiority of the proposed scheme meeting the demands of software defined IIoT. [ABSTRACT FROM AUTHOR]

The rise of digital twin-based operational improvements poses a challenge to protecting industrial cyber-physical systems. It is crucial to safeguard digital twins while disclosing internals, which can create an increased attack surface. However, leveraging digital twins to simulate attacks on physical infrastructure becomes essential for enhancing ICPS cybersecurity resilience. This paper introduces an integrated intelligent defense framework called CyberDefender to study various attacks on digital twin-based ICPS from a four-layer perspective (i.e., digital twin-based industrial cyber-physical systems infrastructure layer, honeynet and software-defined industrial network layer, intelligent security platform layer, and smart industrial application layer). To demonstrate its feasibility, we implemented a proof-of-concept (PoC) solution using open-source tools, including AWS for cloud infrastructure, T-Pot for Honeynet, Mininet for SDN support, ELK tools for data management, and Docker for containerization. This framework utilizes an integrated intelligent approach to enhance intrusion detection and classification capabilities for digital twin-based industrial cyber-physical systems (DT-ICPS). The proposed intrusion detection system (IDS) combines two strategies to improve security. First, we present an innovative approach to identifying essential features using explainable AI and ensemble-based filter feature selection (XAI-EFFS). By using Shapley Additive Explanations (SHAP), we analyze the impact of different variables on predictive outcomes. Secondly, we propose a hybrid GRU-LSTM deep-learning model for detecting and classifying intrusions. We optimize the hyperparameters of the GRU-LSTM model by using a Bayesian optimization algorithm. The proposed method demonstrates excellent performance, outperforming conventional state-of-the-art techniques with an accuracy rate of 98.96%, which is a remarkable improvement. Additionally, it effectively detects zero-day attacks, contributing to digital twin-based ICPS cybersecurity resilience. [ABSTRACT FROM AUTHOR]

Both academics and the IT industry are now researching the Internet of Things and software-defined networks. They have received a number of criticisms in the SD-IoT due to their novelty. One of the 5 G technologies that makes it possible to construct complex, controllable, economical, and adaptive networks is software-defined networking (SDN). In contrast, edge computing (EC) uses data from sensors, network switches, or other devices to automatically do analytical computing rather than waiting for the data to be sent back to a centralised data repository. This article offers a study on feature selection using an ensemble of filter methods to create a lightweight IDS for SD-IoT edge devices that support OpenFlow in order to defend against such attacks. To create the ensemble of filter methods, three filter-based methods, namely Pearson's correlation coefficient (PCC), mutual information (MI), and Fisher's score, have been used. The features selected by this ensemble is sent to the ensemble of classifiers called stack of the classifiers that comprises of support vector machine (SVM) and K-nearest neighbour (KNN) at level '0' and logistic regression (LR) at level '1'. To check the effectiveness of the selected features, stack of the classifiers and individual classifiers are trained and tested with 'All' and 'Selected' features, and then their performances are compared. Two datasets, the BoT-IoT dataset and the TON-IoT dataset, were utilised to complete this work. The performance is compared under some performance measuring metrics, namely recall, accuracy, FAR, F1, precision, CKC, and prediction time. It has been discovered that classifiers perform better when trained with selected features rather than all the features. Also, it is discovered that stack of the classifiers with chosen features outperforms all individual classifiers, hence it is chosen for deployment in OpenFlow enabled edge devices of the SD-IoT data plane where it can identify and counteract threats in real-world settings. This offers the SD-IoT distributed attack detection approach. [ABSTRACT FROM AUTHOR]

Controller placement issue (CPI) in software-defined networks (SDNs) describes the controllers' number, location, and assigning of forwarding devices to controllers. Recently, mathematical formulations and algorithms have been proposed to solve various problems in SDNs and software-defined wide area networks. The comprehensive literature review can be divided into four groups according to objectives: (i) minimizing latency between forwarding devices or switches and their corresponding controllers, and minimizing latency between controllers, (ii) improving network resilience and stability, (iii) minimizing energy consumption and installation costs and (iv) using multi-objective approaches. In addition to the objectives of each research, the importance of this paper is to examine the CPI in terms of reducing the network search space in order to optimally place the controller and how to assign switches to the controllers. In this paper, first the mathematical formulations in previous studies will be examined and then, for solving CPI, the existing algorithms will be discussed. Different classifications of CPIs and related formulas/algorithms, descriptions, advantages and disadvantages will be separately provided. A comprehensive comparison of proposed approaches with their advantages and disadvantages in the summarized tables will be provided. Also, a comparative discussion of different statistics of CPIs will be presented in terms of some technical features such as objective-oriented problems and parameters in four categories, estimated environments, and efficient estimating factors in CPIs. Finally, we explained the future studies' challenges, problems related to CPIs, ideas and following orientations in this field. [ABSTRACT FROM AUTHOR]

In optical data center networks, the utilization of several software-defined network controllers has been implemented to enhance scalability and reliability. However, during dynamic variations in network traffic, static controller deployment often leads to load imbalance among the controllers. Previous studies have proposed dynamic switch migration as a solution to realize controller load balancing. However, the effectiveness of existing switch migration methods remains insufficient. The load balancing performance of controllers demonstrates limited enhancement following migration, and the migration operations themselves result in supplementary costs. As a result, the issue of switch migration efficiency remains unresolved. To tackle controller load balancing, this research introduces the intelligent controller load balancing (ICLB). ICLB incorporates multiple load metrics to evaluate controller load and selects the ideal target controller based on available resources, leading to enhanced load balancing effectiveness. Moreover, it selects switches while the minimizing migration process, effectively reducing supplementary expenses. Additionally, ICLB can simultaneously manage the workload of multiple controllers during a switch migration process, resulting in enhanced migration efficiency. The outcomes of simulations provide evidence that ICLB offers substantial improvements in controller load balancing performance, along with reduced migration expenses compared to existing solutions. [ABSTRACT FROM AUTHOR]

Software-defined networking (SDN) is a modern paradigm leveraging software programmability to enhance communication networks, garnering significant attention and undergoing substantial development due to its diverse applications. One key challenge in SDN lies in managing increasing traffic while avoiding flow table overflow, particularly due to the limited capacity of Ternary Content Addressable Memory (TCAM) in OpenFlow switches. This paper presents a Systematic Literature Review (SLR) that analyzes various approaches to defending against flow table overflow in SDN. Employing a structured approach, we sift through a substantial corpus of research, distilling it into 44 noteworthy articles published from 2015 to the present. We provide an overview of strategies to mitigate flow table overflow attacks, including eviction strategies, dynamic timeout mechanisms, flow rerouting, and aggregated flow entries. Additionally, we analyze mitigation approaches based on deployment strategies, testbed environments, and traffic generation methods. In conclusion, we identify research gaps and challenges, laying the groundwork for future investigations in this domain. [ABSTRACT FROM AUTHOR]

Communication is crucial to the performance of distributed training. Today's solutions tightly couple the control and data planes and lack flexibility, generality, and performance. In this study, we present SDCC, a software-defined collective communication framework for distributed training. SDCC is based on the principle of modern systems design to effectively decouple the control plane from the data plane. SDCC abstracts the operations for collective communication in distributed training with dataflow operations and unifies computing and communication with a single dataflow graph. The abstraction, together with the unification, is powerful: it enables users to easily express new and existing collective communication algorithms and optimizations, simplifies the integration with different computing engines (e.g., PyTorch and TensorFlow) and network transports (e.g., Linux TCP and kernel bypass), and allows the system to improve performance by exploiting parallelism exposed by the dataflow graph. We further demonstrate the benefits of SDCC in four use cases. [ABSTRACT FROM AUTHOR]

This study introduces an innovative approach for detecting Distributed Denial-of-Service (DDoS) attacks in Software-Defined Networks (SDNs) with a multi-controller setup, specifically tailored to secure Internet of Things (IoT) devices. Traditional DDoS detection techniques struggle with the dynamic and sophisticated nature of modern network threats, particularly in complex and scalable environments like SDNs. To address these challenges, our objective is to develop a methodology that integrates adaptive learning and feedback mechanisms to continuously evolve and improve detection accuracy. Our approach utilizes adaptive learning models that dynamically adjust to new data and emerging attack patterns, learning continuously from network behaviour to detect subtle and novel attack strategies effectively. By implementing a system of feedback loops, our detection algorithms receive real-time insights from the operational environment, allowing immediate adaptation to changing network conditions and attack techniques. Advanced feature selection methods are employed to identify the most relevant data points from network traffic. Through ROC curve analysis of various machine learning models--RNN, LSTM, GAN, and Auto Encoder--using Chi-Square, Decision Tree, and PCA feature selection methods, PCA consistently demonstrated superior performance. It achieved higher true positive rates across various false positive rates, indicating better classification accuracy. The Auto Encoder model, combined with PCA, exhibited the best results, highlighting its efficacy in balancing sensitivity and specificity for anomaly detection. Experimental evaluations conducted using the CICDDoS2019 dataset highlight the effectiveness of our approach. The proposed Auto Encoder model with PCA feature selection achieved the highest accuracy at 99.56%, surpassing other models such as LSTM with feature selection, which achieved 99.42%, and RNN LSTM, which had the lowest accuracy at 89.63%. These results demonstrate the effectiveness of our approach in enhancing the accuracy and reliability of network traffic anomaly detection, particularly for DDoS attacks involving IoT devices. Overall, our research combines adaptive learning and feedback loops to create a dynamic, intelligent DDoS detection system for SDNs, advancing network security in handling evolving threats. [ABSTRACT FROM AUTHOR]

Distributed denial of service (DDoS) attacks pose a significant threat to Software Defined Networking (SDN) and are frequently employed by malicious actors. SDN has emerged as a prominent networking paradigm, providing users with a decoupled control and data plane, which grants greater control and programmability over the network. In comparison to traditional networks, SDN offers dynamic, agile, cost-effective, and manageable solutions. However, a notable drawback of SDN is that the central controller becomes a vulnerable attack surface, rendering it susceptible to complete network takeover through DDoS attacks. The novelty of this paper is to gather resources that will be used to mitigate DDoS attacks in SDN environments. This paper focuses on the exploration of open datasets featuring DDoS attacks, as well as examining attack detection and mitigation techniques and frameworks. By analyzing various detection and mitigation strategies, network administrators and security professionals can make informed decisions to enhance the robustness and resilience of SDN environments in the face of evolving DDoS threats. [ABSTRACT FROM AUTHOR]

The emergence of beyond 5G networks has the potential for seamless and intelligent connectivity on a global scale. Network slicing is crucial in delivering services for different, demanding vertical applications in this context. Next-generation applications have time-sensitive requirements and depend on the most efficient routing path to ensure packets reach their intended destinations. However, the existing IP (Internet Protocol) over a multi-domain network faces challenges in enforcing network slicing due to minimal collaboration and information sharing among network operators. Conventional inter-domain routing methods, like Border Gateway Protocol (BGP), cannot make routing decisions based on performance, which frequently results in traffic flowing across congested paths that are never optimal. To address these issues, we propose CoopAI-Route, a multi-agent cooperative deep reinforcement learning (DRL) system utilizing hierarchical software-defined networks (SDN). This framework enforces network slicing in multi-domain networks and cooperative communication with various administrators to find performance-based routes in intra- and inter-domain. CoopAI-Route employs the Distributed Global Topology (DGT) algorithm to define inter-domain Quality of Service (QoS) paths. CoopAI-Route uses a DRL agent with a message-passing multi-agent Twin-Delayed Deep Deterministic Policy Gradient method to ensure optimal end-to-end routes adapted to the specific requirements of network slicing applications. Our evaluation demonstrates CoopAI-Route's commendable performance in scalability, link failure handling, and adaptability to evolving topologies compared to state-of-the-art methods. [ABSTRACT FROM AUTHOR]

The classification of network traffic has become increasingly crucial due to the rapid growth in the number of internet users. Conventional approaches, such as identifying traffic based on port numbers and payload inspection are becoming ineffective due to the dynamic and encrypted nature of modern network traffic. A number of researchers have implemented Software Defined Networking (SDN) based traffic classification using Machine Learning (ML) and Deep Learning (DL) models. However, the studies had various limitations such as encrypted traffic detection, payload inspection, poor detection accuracy, and challenges with testing models both in offline and real-time traffic modes. ML models together with SDN are adopted nowadays to enhance classification performance. In this paper, both supervised (Logistic Regression, Decision Tree, Random Forest, AdaBoost, and Support Vector Machine) and unsupervised (K-means clustering) ML models were used to classify Domain Name System (DNS), Telnet, Ping, and Voice traffic flows simulated using the Distributed Internet Traffic Generator (D-ITG) tool. The use of this tool effectively manages and classifies traffic types based on their application. The study discussed the dataset used, model selection, implementation of the model, and implementation techniques (such as pre-processing, feature extraction, ML algorithm, and model evaluation metrics). The proposed model in SDN was implemented in Mininet for designing the network architecture and generating network traffic. Anaconda Python environment was utilized for traffic classification using various ML techniques. Among the models tested, the Decision Tree supervised learning achieved the highest accuracy of 99.81%, outperforming other supervised and unsupervised learning algorithms. These results indicate that the integration of ML with SDN provides an efficient classification method for identifying and accurately classifying both offline and real-time network traffic, enhanced quality of service (QoS), detection of encrypted packets, deep packet inspection and management. [ABSTRACT FROM AUTHOR]

With the ongoing digital transformation, the requirement for seamless & agile network connectivity has increased. This has necessitated the transformation from traditional networking to Software-Defined Network. With SDN, the network resources/infrastructure can be made more robust and programmable to accommodate the varying demand. Software-Defined Network (SDN) is now being used by data centers, cloud computing environments, and service providers for efficient handling of network requests. The objective of SDN can be achieved through the performance of the controllers. We have considered POX, Ryu, and ODL controllers to evaluate the performance using the Mininet tool and D-ITG (Distributed Internet Traffic Generator) script. Performance is evaluated using custom topology i.e. Fat tree topology. Several performance metrics (such as Delay, Jitter, Bitrate, Packet rate, Loss-burst size, and Percentage of Packets dropped) are considered and the behaviors of the controllers are monitored during experimentation by flooding the switches with several data packets. It has been observed that the POX controller performs better compared to Ryu and ODL for the Fat tree topology. From the experimental results, it is observed that the average delay of ODL is approximately 50% more than the POX controller and approximately 80% more delay occurred in the Ryu controller in comparison to the POX controller. Similarly average packet dropped percentage of POX is 20% less than Ryu and ODL controllers. Also, it has been observed that the average jitter in POX is almost 50% less in comparison to ODL and 90% less in comparison to the Ryu controller. [ABSTRACT FROM AUTHOR]

Software-defined networking (SDN) revolutionizes network administration by centralizing control and decoupling the data plane from the control plane. Despite its advantages, the escalating volume of network traffic induces congestion at nodes, adversely affecting routing quality and overall performance. Addressing congestion has become imperative due to its emergence as a fundamental challenge in network management. Previous strategies often faced drawbacks in handling congestion, with issues arising from the inability to efficiently manage heavy packet surges in specific network regions. In response, this research introduces a novel approach integrating a multiplicative gated recurrent neural network with a congestion-aware hunter prey optimization (HPO) algorithm for effective traffic management in SDN. The framework leverages machine learning and deep learning techniques, acknowledged for their proficiency in processing traffic data. Comparative simulations showcase the congestion-aware HPO algorithm's superiority, achieving a normalized throughput 3.4–7.6% higher than genetic algorithm (GA) and particle swarm optimization (PSO) alternatives. Notably, the proposed framework significantly reduces data transmission delays by 58–65% compared to the GA and PSO algorithms. This research not only contributes a state-of-the-art solution but also addresses drawbacks observed in existing methodologies, thereby advancing the field of traffic engineering and congestion management in SDN. The proposed framework demonstrates notable enhancements in both throughput and latency, providing a more robust foundation for future SDN implementations. [ABSTRACT FROM AUTHOR]

Network slicing is crucial to the 5G architecture because it enables the virtualization of network resources into a logical network. Network slices are created, isolated, and managed using software-defined networking (SDN) and network function virtualization (NFV). The virtual network function (VNF) manager must devise strategies for all stages of network slicing to ensure optimal allocation of physical infrastructure (PI) resources to high-acceptance virtual service requests (VSRs). This paper investigates two independent network slicing frameworks named as dual-slice isolation and management strategy (D-SIMS) and recommends the best of the two based on performance measurements. D-SIMS places VNFs for network slicing using self-sustained resource reservation (SSRR) and master-sliced resource reservation (MSRR), with some flexibility for the VNF manager to choose between them based on the degree to which the underlying physical infrastructure has been sliced. The present research work consists of two phases: the first deals with the creation of slices, and the second with determining the most efficient way to distribute resources among them. A deep neural network (DNN) technique is used in the first stage to generate slices for both PI and VSR. Then, in the second stage, we propose D-SIMS for resource allocation, which uses both the fuzzy-PROMETHEE method for node mapping and Dijkstra's algorithm for link mapping. During the slice creation phase, the proposed DNN training method's classification performance is evaluated using accuracy, precision, recall, and F1 score measures. To assess the success of resource allocation, metrics such as acceptance rate and resource effectiveness are used. The performance benefit is investigated under various network conditions and VSRs. Finally, to demonstrate the importance of the proposed work, we compare the simulation results to those in the academic literature. [ABSTRACT FROM AUTHOR]

Vehicular fog computing (VFC) is an innovative computing paradigm with an exceptional ability to improve the vehicles' capacity to manage computation-intensive applications with both low latency and energy consumption. Moreover, more and more Artificial Intelligence (AI) technologies are applied in task offloading on the Internet of Vehicles (IoV). Focusing on the problems of computing latency and energy consumption, in this paper, we propose an AI-based Vehicle-to-Everything (V2X) model for tasks and resource offloading model for an IoV network, which ensures reliable low-latency communication, efficient task offloading in the IoV network by using a Software-Defined Vehicular-based FC (SDV-F) architecture. To fit to time-critical data transmission task distribution, the proposed model reduces unnecessary task allocation at the fog computing layer by proposing an AI-based task-allocation algorithm in the IoV layer to implement the task allocation of each vehicle. By applying AI technologies such as reinforcement learning (RL), Markov decision process, and deep learning (DL), the proposed model intelligently makes decision on maximizing resource utilization at the fog layer and minimizing the average end-to-end delay of time-critical IoV applications. The experiment demonstrates the proposed model can efficiently distribute the fog layer tasks while minimizing the delay. [ABSTRACT FROM AUTHOR]

The security requirements for SDN (Software-Defined Network) cross-domain communication are diverse and dynamically changing; thus, a security service negotiation function is required for the SDN interdomain. However, the SDN interdomain distributed communication environment leads to a lack of trustworthiness and security. Therefore, this paper proposes a blockchain-based SDN interdomain security service negotiation mechanism, BSSN-SDNs, to provide automatic, secure, and trustworthy SDN interdomain security service negotiation. BSSN-SDNs proposes a three-layer reference architecture that enables joint on-chain and off-chain work by extending the security service negotiation module and blockchain client on the controller and deploying security service negotiation smart contracts on the blockchain. It especially adopts non-interactive key exchange and the message authentication code to ensure the confidentiality of the secure service negotiated on-chain. Finally, the timeliness as well as security and trustworthiness of BSSN-SDNs are analyzed, and the FISCO BCOS-based experiment results show that the delay of BSSN-SDNs is acceptable and is positively correlated with the number of policies and the number of SDN domains involved in negotiation. [ABSTRACT FROM AUTHOR]

In recent times, Software Defined Networking (SDN) has gained immense popularity among communication networks due to its high network connectivity and security. But, owing to the lack of sufficient security schemes and dynamic access control, conventional techniques could be more efficient. Hence, this paper proposes a secure intrusion detection scheme for SDN utilizing LogishFTS-based Recurrent Neural Networks (LFTS-RNN) and Poisson Clumping Japanese Tree Frog Optimization Algorithm (PC-JTFOA). Initially, by using a username, password, and Signed Access Control (SAC), the registered users log in to the network. The Entropy Makwa-based Digital Signature Algorithm (EMDSA) is utilized to identify the attackers during the login process. Then, the Intrusion Detection System (IDS) is trained using the historical dataset. The critical features are extracted in IDS; subsequently, by using the PC-JTFOA, the optimal features are selected. Likewise, the selected features are inputted into the LFTS-RNN to recognize the intruders in the application plane. Moreover, the process of data security and load balancing is undergone by the data. Afterward, the balanced data is subjected to IDS to detect the attackers in the control plane. According to experimental outcomes, the proposed technique obtained a higher prominence with an accuracy of 98.35%. [ABSTRACT FROM AUTHOR]

Software-defined networks (SDNs) have been growing rapidly due to their ability to provide an efficient network management approach compared to traditional methods. However, one of the major challenges facing SDNs is the threat of Distributed Denial of Service (DDoS) attacks, which can severely impact network availability. Detecting and mitigating such attacks is challenging, given the constantly evolving range of attack techniques. In this paper, a novel hybrid approach is proposed that combines statistical methods with machine-learning capabilities to address the detection and mitigation of DDoS attacks in SDN environments. The statistical phase of the approach utilizes an entropy-based detection mechanism, while the machine-learning phase employs a clustering mechanism to analyze the impact of active users on the entropy of the system. The k-means algorithm is used for clustering. The proposed approach was experimentally evaluated using three modern datasets, namely, CIC-IDS2017, CSE-CIC-2018, and CICIDS2019. The results demonstrate the effectiveness of the system in detecting and blocking sudden and rapid attacks, highlighting the potential of the proposed approach to significantly enhance security against DDoS attacks in SDN environments. [ABSTRACT FROM AUTHOR]

The social internet of vehicle (SIoV) is a specialized network combining intelligent sensing devices and vehicular communications to address traffic monitoring and resource management challenges in smart cities. Ensuring efficient and sustainable green computing with global network stability is crucial, especially in the dynamic environment of vehicular mobility. The software-defined-SIoV (SD-SIoV) architecture separates control and forwarding planes for centralized management. The architecture addresses green traffic data dissemination with heterogeneous traffic data by formulating control plane nodes' election as an NP-Hard optimization problem, considering parameters, e.g., transmission distance, node's residual energy, load imbalance, and mobility factor. The architecture incorporates the random way-point mobility (RWPM) model for simulating nodes' mobility. The proposed improved energy-efficient gray wolf optimization (IEEGWO) algorithm enhances energy-efficiency by intelligently electing and re-electing optimal control plane nodes, jointly addressing load imbalance and fault-tolerance issues, ultimately improving green computing and communication performance in SD-SIoV. Comparative analysis with state-of-the-art demonstrates that IEEGWO provides significant green computing benefits in a real-time SIoV scenario [ABSTRACT FROM AUTHOR]

The number of connected devices or Internet of Things (IoT) devices has rapidly increased. According to the latest available statistics, in 2023, there were approximately 17.2 billion connected IoT devices; this is expected to reach 25.4 billion IoT devices by 2030 and grow year over year for the foreseeable future. IoT devices share, collect, and exchange data via the internet, wireless networks, or other networks with one another. IoT interconnection technology improves and facilitates people's lives but, at the same time, poses a real threat to their security. Denial-of-Service (DoS) and Distributed Denial-of-Service (DDoS) attacks are considered the most common and threatening attacks that strike IoT devices' security. These are considered to be an increasing trend, and it will be a major challenge to reduce risk, especially in the future. In this context, this paper presents an improved framework (SDN-ML-IoT) that works as an Intrusion and Prevention Detection System (IDPS) that could help to detect DDoS attacks with more efficiency and mitigate them in real time. This SDN-ML-IoT uses a Machine Learning (ML) method in a Software-Defined Networking (SDN) environment in order to protect smart home IoT devices from DDoS attacks. We employed an ML method based on Random Forest (RF), Logistic Regression (LR), k-Nearest Neighbors (kNN), and Naive Bayes (NB) with a One-versus-Rest (OvR) strategy and then compared our work to other related works. Based on the performance metrics, such as confusion matrix, training time, prediction time, accuracy, and Area Under the Receiver Operating Characteristic curve (AUC-ROC), it was established that SDN-ML-IoT, when applied to RF, outperforms other ML algorithms, as well as similar approaches related to our work. It had an impressive accuracy of 99.99%, and it could mitigate DDoS attacks in less than 3 s. We conducted a comparative analysis of various models and algorithms used in the related works. The results indicated that our proposed approach outperforms others, showcasing its effectiveness in both detecting and mitigating DDoS attacks within SDNs. Based on these promising results, we have opted to deploy SDN-ML-IoT within the SDN. This implementation ensures the safeguarding of IoT devices in smart homes against DDoS attacks within the network traffic. [ABSTRACT FROM AUTHOR]

Maintaining security in communication networks has long been a major concern. This issue has become increasingly crucial due to the emergence of new communication architectures like the Internet of Things (IoT) and the advancement and complexity of infiltration techniques. For usage in networks based on the Internet of Things, previous intrusion detection systems (IDSs), which often use a centralized design to identify threats, are now ineffective. For the resolution of these issues, this study presents a novel and cooperative approach to IoT intrusion detection that may be useful in resolving certain current security issues. The suggested approach chooses the most important attributes that best describe the communication between objects by using Black Hole Optimization (BHO). Additionally, a novel method for describing the network's matrix-based communication properties is put forward. The inputs of the suggested intrusion detection model consist of these two feature sets. The suggested technique splits the network into a number of subnets using the software-defined network (SDN). Monitoring of each subnet is done by a controller node, which uses a parallel combination of convolutional neural networks (PCNN) to determine the presence of security threats in the traffic passing through its subnet. The proposed method also uses the majority voting approach for the cooperation of controller nodes in order to more accurately detect attacks. The findings demonstrate that, in comparison to the prior approaches, the suggested cooperative strategy can detect assaults in the NSLKDD and NSW-NB15 datasets with an accuracy of 99.89 and 97.72 percent, respectively. This is a minimum 0.6 percent improvement. [ABSTRACT FROM AUTHOR]

The advancement of technology allows for easy adaptability with IoT devices. Internet of Things (IoT) devices can interact without human intervention, which leads to the creation of smart cities. Nevertheless, security concerns persist within IoT networks. To address this, Software Defined Networking (SDN) has been introduced as a centrally controlled network that can solve security issues in IoT devices. Although there is a security concern with integrating SDN and IoT, it specifically targets Distributed Denial of Service (DDoS) attacks. These attacks focus on the network controller since it is centrally controlled. Real-time, high-performance, and precise solutions are necessary to tackle this issue effectively. In recent years, there has been a growing interest in using intelligent deep learning techniques in Network Intrusion Detection Systems (NIDS) through a Software-Defined IoT network (SDN-IoT). The concept of a Wireless Network Intrusion Detection System (WNIDS) aims to create an SDN controller that efficiently monitors and manages smart IoT devices. The proposed WNIDS method analyzes the CSE-CIC-IDS2018 and SDN-IoT datasets to detect and categorize intrusions or attacks in the SDN-IoT network. Implementing a deep learning method called Bidirectional LSTM (BiLSTM)--based WNIDS model effectively detects intrusions in the SDN-IoT network. This model has achieved impressive accuracy rates of 99.97% and 99.96% for binary and multi-class classification using the CSE-CIC-IDS2018 dataset. Similarly, with the SDN-IoT dataset, the model has achieved 95.13% accuracy for binary classification and 92.90% accuracy for multi-class classification, showing superior performance in both datasets. [ABSTRACT FROM AUTHOR]

Summary: In this work, we address the problem of resource allocation in Internet of Everything (IoE)‐enabled software‐defined edge networks. In the existing literature, the researchers considered optimizing the performance of the software‐defined networking (SDN) platform using a single‐tier architecture, where the Internet of Things (IoT) devices are in the same tier. However, with the advent of edge computing, we can explore the two‐tier architecture of edge networks—local tier and edge tier—in the presence of SDN, which has not been explored. Hence, we propose an evolutionary game‐based resource allocation scheme for software‐defined edge networks. Additionally, we aim to optimize the QoS of the edge‐based IoE services while optimizing the throughput of the system. The IoT devices use the proposed scheme in the local tier to identify the optimized mapping to the SDN switches. On the other hand, in the edge tier, the proposed scheme aims to optimize the throughput while allocating the IoE service to the optimal subset of edge devices. We evaluated the performance of the proposed scheme using the Python3‐based Mininet platform in the presence of Ryu Controller and Open vSwitches. Ryu is an element‐based software defined networking framework, which offers software elements with well‐described API that enables developers to produce new network control functions. We observed that by using T‐RESIN, the network throughput increases by 27.98%–31.84% than using the existing schemes. [ABSTRACT FROM AUTHOR]

The Internet of things (IoT) is the third evolution of the traditional Internet, enabling interaction and communication among machines. IoT platforms and networks have been developed, and market sectors have recently started developing specific IoT applications and services. Integrating heterogeneous IoT networks with the existing ones, mainly cellular networks, is in great demand. IoT represents one of the prominent use cases of the sixth-generation (6G) cellular system, as announced by the Third Generation Partnership Project (3GPP) and the International Telecommunication Union (ITU). This study focuses on Heterogeneous IoT networks over 6G networks with ultra-dense deployment using Mobile edge computing and software-defined wide-area network (MEC/SDWAN). This software-defined wide-area network is used for designing systematic Wireless Inventory Trackers (WIT). Wireless inventory trackers identify the exact location. However, the heterogeneous network consists of interconnected nodes and links of different types with a software-defined Wide Area Network(SD-WAN). To address the heterogeneous network system capacity issue, the HIoT and Ultra-Dense deployment are employed for making the promising technologies in the 6G to manage them, enhancing the spatial reuse through flexible, intensive deployment. This procedure helps to improve the prolonged lifetime of up to 2.5 h with low energy consumption of up to (3%) on efficient communications in the 6G cellular network. [ABSTRACT FROM AUTHOR]

To deal with the problem of complex changes of topology in UAVs (Unmanned Aerial Vehicles) network and the increasing need of data transmission, the combination of self-organizing and SDN (Software Defined Network) is a usefull paradigm. However, the control node's position in SDN will influence the transmission of command between controller and relay nodes, thus determining the quality of communication. In this context, we present a network construction, named SDN-FANET (Flying Ad-Hoc Network). We formulate the problem as a classical network center location model. To solve this problem, we propose a particle swarm algorithm based on the graph theory. Simulation results show the algorithm performs better in terms of accuracy and stability, compared with several benchmarks. Particularly, with the initial particle position optimized, the proposed algorithm converges faster. [ABSTRACT FROM AUTHOR]

Industrial Control Systems are used in a wide variety of industrial facilities, including critical infrastructures, becoming the main target of multiple security attacks. A malicious and successful attack against these infrastructures could cause serious economic and environmental consequences, including the loss of human lives. Static networks configurations and topologies, which characterize Industrial Control Systems, represent an advantage for attackers, allowing them to scan for vulnerable devices or services before carrying out the attack. Identifying active devices and services is often the first step for many attacks. This paper presents a proactive network reconnaissance defense mechanism based on the temporal randomization of network IP addresses, MAC addresses and port numbers. The obtained information distortion minimizes the knowledge acquired by the attackers, hindering any attack that relies on network addressing. The temporal randomization of network attributes is performed in an adaptive way, minimizing the overhead introduced in the network and avoiding any error and latency in communications. The implementation as well as the tests have been carried out in a laboratory with real industrial equipment, demonstrating the effectiveness of the presented solution. [ABSTRACT FROM AUTHOR]

The proliferation of mobile devices and the increasing use of networked applications have generated enormous data that require real-time processing and low-latency responses. For real-time applications, Edge Computing (EC) gained a lot of attention which helps to overcome the challenges with traditional computing systems. There is a massive growth of data generated at the web edge, but its limited computing resources and boundary dynamics pose significant challenges. For proficient resource utilization and network management, Software-Defined Networks (SDN) integration with EC can provide control and programmability in edge networking management. However, the optimization of resources is a fundamental need and challenge of EC based on SDN. Besides, the utilization of SDN in EC deals with a centralized and distributed infrastructure further enables the processing of data in closer proximity to its origin and helps in the growing demand for efficient and high-performance computing systems. This study presents a systematic review of the current state-of-the-art pertaining to resource optimization in EC and its integration with SDN. The review of challenges, benefits, and various proposed methodologies for managing resources in Edge and SDN-based Edge environments are investigated. This paper offers valuable insights into the current state and future directions of Edge, SDN-based EC systems, which can assist organizations in designing and deploying more efficient resource consumption solutions [ABSTRACT FROM AUTHOR]

The clustering methods of Software-Defined Networking (SDN) have gained popularity due to their ability to offer improved scalability, consistency, dependability, and load balancing within overlay networks and SDN partitions. This paper delved into the effects of increasing the number of OpenFlow-enabled southbound devices on the establishment and coordination of SDN-controller clusters. Specifically, we examined the volume of east–west cluster packet communications concerning the number of southbound devices within the topology. Many research studies have focused on bandwidth and the number of bytes in east–west communication. While bandwidth refers to the maximum rate at which data can be transferred, and the number of bytes reflects the volume of data being transmitted, the number of packet communications directly influences the efficiency and responsiveness of network operations. Our investigation encompassed the impact of SDN controller-to-controller communication within the cluster concerning the rising number of OpenFlow switches connected to various topologies, including tree (star-bus network), linear, and torus configurations. This study provided data on communication patterns within Open Network Operating Systems (ONOS) and OpenDaylight (ODL) clusters, revealing differing levels of controller communication with southbound network expansions. We evaluated the scalability of ODL and ONOS controllers by scrutinising the effect of increasing the number of southbound devices on the control communication volume. Our analysis revealed varied communication patterns within ONOS and ODL clusters, resulting in different volumes of control communication with southbound expansions. The findings indicated that in small-to-medium-sized SDNs, ODL outperformed ONOS, notably with faster cluster discovery. Conversely, ONOS demonstrated greater efficiency in larger networks owing to its centralised communication architecture. Finally, we provide recommendations for selecting the most suitable controllers based on the size of southbound networks, aiming to provide practical guidelines for optimal network performance. [ABSTRACT FROM AUTHOR]

Emerging Zoned Namespace (ZNS) SSDs, providing the coarse-grained zone abstraction, hold the potential to significantly enhance the cost efficiency of future storage infrastructure and mitigate performance unpredictability. However, existing ZNS SSDs have a static zoned interface, making them in-adaptable to workload runtime behavior, unscalable to underlying hardware capabilities, and interfering with co-located zones. Applications either under-provision the zone resources yielding unsatisfied throughput, create over-provisioned zones and incur costs, or experience unexpected I/O latencies. We propose eZNS, an elastic-ZNS interface that exposes an adaptive zone with predictable characteristics. eZNS comprises two major components: a zone arbiter that manages zone allocation and active resources on the control plane, and a hierarchical I/O scheduler with read congestion control and write admission control on the data plane. Together, eZNS enables the transparent use of a ZNS SSD and closes the gap between application requirements and zone interface properties. Our evaluations over RocksDB demonstrate that eZNS outperforms a static zoned interface by 17.7% and 80.3% in throughput and tail latency, respectively, at most. [ABSTRACT FROM AUTHOR]

Software-defined networking (SDN) is characterized by the separation of the packet forwarding plane from the network control plane. This separation offers an extensive view of the network's state, enhancing network resilience and management. Network traffic classification can improve SDN control and resource provisioning, particularly for elephant flows (EFs) detection. Existing techniques for detecting EFs utilize preset thresholds and bandwidth that are inadequate for changing traffic concepts. Moreover, these techniques consume high data plane-controller bandwidth and have a high detection time. This research first describes the related management techniques in SDN. Then according to the detecting location, elephant flow detection approaches are classified into four kinds: host-based, switch-based, controller-based, and hybrid controller-switch-based detection. This research examined four types of detection approaches and concluded that host-based detection primarily relies on the flow statistics threshold. Such approaches frequently gather flow statistics by monitoring the socket buffer or via the hypervisor. In contrast, switch-based detection can leverage both the flow statistics threshold and flow characteristics. Controller-based detection techniques in SDN focus on extracting flow feature statistics at the controller level, aiming to reduce switch overhead while potentially increasing controller loads. Finally, hybrid controller-switch-based detection combines both routing aspects, offering fine-grained flow control. However it faces challenges in maintaining a balance in timeliness, accuracy, and cost. Furthermore, the survey incorporates recent SDN advancements such as machine learning-based methods, programmable switches, and real-world SDN applications in data centers, global content delivery networks, healthcare, and IoT. Finally, the article makes a comprehensive comparison and puts forward several points of future prediction in terms of elephant flow detection, taking into account recent advances in SDN research. [ABSTRACT FROM AUTHOR]

Distributed Denial of Service (DDoS) attack is a major threat to the Internet of Things (IoT), Software Defined Networks (SDN), and Cloud Computing Networks. Due to the tremendous applications of IoT networks, the number of DDoS attacks is increasing significantly, and most sophisticated DDoS attacks are generated through IoT botnets. An IoT botnet-based DDoS attack can disrupt the network quickly with a surge of malicious traffic. Especially in an SDN network, it is important to detect the DDoS attack before it occurs to the SDN controller. DDoS attacks on the centralized controller of the SDN can disrupt the whole network. So, identifying DDoS attacks at the earliest is a critical security measure for network experts and practitioners. In this paper, we analyze the DDoS attack on an SDN environment and develop a method to identify the DDoS attack using Deep Learning (DL). The proposed method converts the captured raw network traffic to image data and classifies the malicious data from normal data. The method is evaluated on our test-bed simulated dataset and two other benchmark datasets. The experimental comparison shows that the proposed method performs better on all three datasets, giving more than 99% classification accuracy. [ABSTRACT FROM AUTHOR]

Software-Defined Networking (SDN) represents a significant paradigm shift in network architecture, separating network logic from the underlying forwarding devices to enhance flexibility and centralize deployment. Concurrently, the Internet of Things (IoT) connects numerous devices to the Internet, enabling autonomous interactions with minimal human intervention. However, implementing and managing an SDN-IoT system is inherently complex, particularly for those with limited resources, as the dynamic and distributed nature of IoT infrastructures creates security and privacy challenges during SDN integration. The findings of this study underscore the primary security and privacy challenges across application, control, and data planes. A comprehensive review evaluates the root causes of these challenges and the defense techniques employed in prior works to establish sufficient secrecy and privacy protection. Recent investigations have explored cutting-edge methods, such as leveraging blockchain for transaction recording to enhance security and privacy, along with applying machine learning and deep learning approaches to identify and mitigate the impacts of Denial of Service (DoS) and Distributed DoS (DDoS) attacks. Moreover, the analysis indicates that encryption and hashing techniques are prevalent in the data plane, whereas access control and certificate authorization are prominently considered in the control plane, and authentication is commonly employed within the application plane. Additionally, this paper outlines future directions, offering insights into potential strategies and technological advancements aimed at fostering a more secure and privacy-conscious SDN-based IoT ecosystem. [ABSTRACT FROM AUTHOR]

The proliferation of the ever-increasing number of highly heterogeneous smart devices and the emerging of a wide range of diverse applications in 5G mobile network ecosystems impose to tackle new set of raising challenges related to agile and automated service orchestration and management. Fully leveraging key enablers technologies such as software defined network, network function virtualization and machine learning capabilities in such environment is of paramount importance to address service function chaining (SFC) orchestration issues according to user requirements and network constraints. To meet these challenges, we propose in this paper a deep reinforcement learning (DRL) approach to investigate online quality of experience (QoE)/quality of service (QoS) aware SFC orchestration problem. The objective is to fulfill intelligent, elastic and automated virtual network functions deployment optimizing QoE while respecting QoS constraints. We implement DRL approach through Double Deep-Q-Network algorithm. We investigate experimental simulations to apprehend agent behavior along a learning phase followed by a testing and evaluation phase for two physical substrate network scales. The testing phase is defined as the last 100 runs of the learning phase where agent reaches on average QoE threshold score ( Q o E T h - S c ). In a first set of experiments, we highlight the impact of hyper-parameters (Learning Rate (LR) and Batch Size (BS)) tuning on better solving sequential decision problem related to SFC orchestration for a given Q o E T h - S c . This investigation leads us to choose the more suitable pair (LR, BS) enabling acceptable learning quality. In a second set of experiments we examine DRL agent capacity to enhance learning quality while meeting performance-convergence compromise. This is achieved by progressively increasing Q o E T h - S c . [ABSTRACT FROM AUTHOR]

SD-WANs are an innovative software-defined network (SDN) technology used to reinvent networks, services, and applications in wide area network (WANs). The development of SD-WANs ranges from network optimization in the past to service provision platforms at present and distributed computing systems in the future. The existing surveys on SD-WANs are fragmented, covering specific problems only, and are not comprehensive with detailed research directions. This paper seeks to provide a systematic survey on SD-WANs by introducing major research directions and stating specific problems. Therefore, four major research directions related to traffic engineering, network optimization and systems, service orchestration, and the security issues of SD-WANs are sequentially introduced, along with detailed statements relating to specific problems and the classification of state-of-the-art research. Finally, the trends and challenges regarding SD-WANs are summarized and our future work is described. [ABSTRACT FROM AUTHOR]

Data centers consume significant amounts of energy, contributing indirectly to environmental pollution through greenhouse gas emissions during electricity generation. According to the Natural Resources Defense Council, information and communication technologies and networks account for roughly 10% of global energy consumption. Reducing power consumption in Data Center Networks (DCNs) is crucial, especially given that many data center components operate at full capacity even under low traffic conditions, resulting in high costs for both service providers and consumers. Current solutions often prioritize power optimization without considering Quality of Service (QoS). Services such as video streaming and Voice over IP (VoIP) are particularly sensitive to loss or delay and require QoS to be maintained below certain thresholds. This paper introduces a novel framework called QoS-Aware Power-Optimized Path Selection (Q-PoPS) for software-defined DCNs. The objective of Q-PoPS is to minimize DCN power consumption while ensuring that an acceptable QoS is provided, meeting the requirements of DCN services. This paper describes the implementation of a prototype for the Q-PoPS framework that leverages the POX Software-Defined Networking (SDN) controller. The performance of the prototype is evaluated using the Mininet emulator. Our findings demonstrate the performance of the proposed Q-PoPS algorithm in three scenarios. Best-case: Enhancing real-time traffic protocol quality without increasing power consumption. midrange-case: Replacing bottleneck links while preserving real-time traffic quality. Worst-case: Identifying new paths that may increase power consumption but maintain real-time traffic quality. This paper underscores the need for a holistic approach to DCN management, optimizing both power consumption and QoS for critical real-time applications. We present the Q-PoPS framework as evidence that such an approach is achievable. [ABSTRACT FROM AUTHOR]

Background: Walking impairment is a common disability post acquired brain injury (ABI), with visually evident arm movement abnormality identified as negatively impacting a multitude of psychological factors. The International Classification of Functioning, Disability and Health (ICF) qualifiers scale has been used to subjectively assess arm movement abnormality, showing strong intra-rater and test-retest reliability, however, only moderate inter-rater reliability. This impacts clinical utility, limiting its use as a measurement tool. To both automate the analysis and overcome these errors, the primary aim of this study was to evaluate the ability of a novel two-level machine learning model to assess arm movement abnormality during walking in people with ABI. Methods: Frontal plane gait videos were used to train four networks with 50%, 75%, 90%, and 100% of participants (ABI: n = 42, healthy controls: n = 34) to automatically identify anatomical landmarks using DeepLabCut™ and calculate two-dimensional kinematic joint angles. Assessment scores from three experienced neurorehabilitation clinicians were used with these joint angles to train random forest networks with nested cross-validation to predict assessor scores for all videos. Agreement between unseen participant (i.e. test group participants that were not used to train the model) predictions and each individual assessor's scores were compared using quadratic weighted kappa. One sample t-tests (to determine over/underprediction against clinician ratings) and one-way ANOVA (to determine differences between networks) were applied to the four networks. Results: The machine learning predictions have similar agreement to experienced human assessors, with no statistically significant (p < 0.05) difference for any match contingency. There was no statistically significant difference between the predictions from the four networks (F = 0.119; p = 0.949). The four networks did however under-predict scores with small effect sizes (p range = 0.007 to 0.040; Cohen's d range = 0.156 to 0.217). Conclusions: This study demonstrated that machine learning can perform similarly to experienced clinicians when subjectively assessing arm movement abnormality in people with ABI. The relatively small sample size may have resulted in under-prediction of some scores, albeit with small effect sizes. Studies with larger sample sizes that objectively and automatically assess dynamic movement in both local and telerehabilitation assessments, for example using smartphones and edge-based machine learning, to reduce measurement error and healthcare access inequality are needed. [ABSTRACT FROM AUTHOR]

Summary Underwater wireless sensor networks (UWSNs) based on autonomous underwater vehicles (AUVs) have become the standard technology for underwater search tasks with the advent of new underwater information and communication technologies (ICTs). It is also vulnerable to threats and malicious attacks because of its inherent characteristics, open acoustic channel and hostile underwater environment. The purpose of this research is to develop a secure data transfer (SDF) system based on software‐defined networking (SDN) architecture with cooperative searching scheme (CSS) (SDN‐SDF‐CSS) for AUV‐based UWSN. This part employs data, local control and the primary control layer to provide a scalable SDN‐based architecture for the AUV‐based UWSN. To accomplish the underwater search operation, the data layer is primarily deployed to gather AUVs (G‐AUVs) and store AUVs (S‐AUVs). In order to schedule the AUV, the clustering process takes place based on priority ranking with respect to the average power of each cluster. Then, the CSS is developed, and it is performed in the data layer. The hierarchical localization framework (HLF) can be used to locate each AUV's location within the data layer, which is a necessary step in deploying the cooperative searching model. Finally, for an efficient data transfer, the communication model is deployed in the data layer. UWSNs are vulnerable to various malicious attacks (such as bad‐mouthing attacks, on–off attacks, blackhole attacks and wormhole attacks) because of the high bit error rate and unstable optical/acoustic channels in the underwater environment. To overcome this, an SDF technique is used, which involves isolating the attacker node from the data layer. The suggested SDN‐SDF‐CSS model is implemented on the MATLAB platform, and its performance is evaluated using various evaluation metrics, both with and without attacks. As a result, the proposed SDN‐SDF‐CSS model has achieved better performance and proved its superiority in the UWSN environment. [ABSTRACT FROM AUTHOR]

Zero-touch networks (ZTNs) can provide autonomous network solutions by integrating software-based solutions for various emerging 5G and 6G applications. The current literature does not provide any suitable end-to-end network management and resource-slicing solutions for service function chaining (SFC) and user intent-based (time and cost preference) 6G/non-6G application execution over ZTNs enabled by mobile edge computing, network function virtualization, and software-defined networking. To tackle these challenges, this work initiates an end-to-end network management and user intent-aware intelligent network resource-slicing scheme for SFC-based 6G/non-6G application execution over ZTNs, taking into account various virtual and physical resources, task workloads, service requirements, and task numbers. The results depicted that at least 25.27% average task implementation delay gain, 6.15% energy gain, and 11.52% service monetary gain are realized in the proposed scheme over the compared schemes. [ABSTRACT FROM AUTHOR]

This work presents the development and testing of an experimental web-based SDR (software-defined radio) monitoring system for indirect solar activity detection, which has the ability to estimate and potentially predict various events in space and on earth, including solar flares, coronal mass ejections, and geomagnetic storms. The proposed system can be used to investigate the effect of solar activity on the propagation of very-low-frequency (VLF) signals. The advantages and benefits of the given approach are as follows: increasing measurement accuracy and eventual solar activity identification by combining measurements from multiple spatially distributed SDRs. The verification process involves carrying out several experiments comparing data from the GOES satellite system and the Dunksin SuperSID system with information received by the SDR monitoring system. Then, utilizing Pearson correlation coefficients, the measured data from the SDRs, along with those from the GOES satellite system and the Dunsing monitoring station, are investigated. At the time of a solar flare, the correlation value is above 90% for most of the stations used. Combining the signal-to-noise ratio via summation also shows an improvement in the results, with a correlation above 98%. [ABSTRACT FROM AUTHOR]

Software-Defined Networking is today a mature technology, which is developed in many networks and also embedded in novel architectures like 5G and 6G. The SDN control centralization concept brings significant advantages for management and control in SDN together with the programmability of the data plane. SDN represents a paradigm shift towards agile, efficient, and secure network infrastructures, moving away from traditional, hardware-centric models to embrace dynamic, software-driven paradigms. SDN is compliant also with the virtualization architecture defined in the Network Function Virtualization framework. However, SDN should cooperate seamlessly for some years with the distributed TCP/IP control developed during the years all over the world. Among others, the traditional tasks of routing, forwarding, load balancing, QoS assurance, security, and privacy should be solved. The SDN native centralization brings also some new challenges and problems which are different from the traditional distributed control IP networks. The algorithms and protocols usable in SDN should meet requirements like scalability, convergence, redundancy assurance, sustainability, and good real-time response, and allow orchestrated automation in enhancing network resilience and adaptability. This work presents a theoretical review of state-of-the-art SDN optimization techniques, offering a critical and comparative discussion of various algorithms having tasks such as routing (including dynamic ones), forwarding, load balancing and traffic optimization, and forwarding delay minimization. Attention is pointed to general algorithms which can offer pragmatic solutions for large systems or multiple metric routing. [ABSTRACT FROM AUTHOR]

Summary: Software‐defined network (SDN) technology is widely used for computer networks, especially in enterprise data centers and virtualized networking. However, SDN networks encounter severe challenges to security. One such challenge comes from third‐party applications that contain malicious logic and security vulnerabilities, resulting in controller integrity attacks. In this paper, we propose a defensive mechanism of object integrity for SDN (DMoiSDN) to mitigate the issue known as Cross‐App Poisoning (CAP). Our results contribute to increasing the integrity level of the controller's resources by conducting a potential risk analysis, which showed a decrease of 57% in the risk factor for potential attacks. We further examined the results of comparing DMoiSDN's performance with related work that uses information flow control (IFC) policies. The best results among the three conducted scenarios were as follows: we found that decreased latency in our system ranged from 12% to 90%, with an average of 59%, when encountering an increase in requests. It ranged from 78% to 49%, with an average of 63%, when receiving a variable number of total permissions for each application. DMoiSDN is expected to show a perceptible but reasonable latency and, to some extent, be able to avoid a critical impact on performance. [ABSTRACT FROM AUTHOR]

As 5G technology becomes more widespread, the significant improvement in network speed and connection density has introduced more challenges to network security. In particular, distributed denial of service (DDoS) attacks have become more frequent and complex in software-defined network (SDN) environments. The complexity and diversity of 5G networks result in a great deal of unnecessary features, which may introduce noise into the detection process of an intrusion detection system (IDS) and reduce the generalization ability of the model. This paper aims to improve the performance of the IDS in 5G networks, especially in terms of detection speed and accuracy. It proposes an innovative feature selection (FS) method to filter out the most representative and distinguishing features from network traffic data to improve the robustness and detection efficiency of the IDS. To confirm the suggested method's efficacy, this paper uses four common machine learning (ML) models to evaluate the InSDN, CICIDS2017, and CICIDS2018 datasets and conducts real-time DDoS attack detection on the simulation platform. According to experimental results, the suggested FS technique may match 5G network requirements for high speed and high reliability of the IDS while also drastically cutting down on detection time and preserving or improving DDoS detection accuracy. [ABSTRACT FROM AUTHOR]

Software-defined networking (SDN) revolutionizes network management by offering centralized control over complex infrastructures, but it also introduces significant security vulnerabilities. particularly Distributed Denial of Service (DDoS) attacks that significantly interrupt network services. The challenge of efficiently detecting DDoS attacks in SDNs is exacerbated by the computational overhead associated with analyzing numerous network features using conventional Machine Learning (ML) techniques. Addressing this gap, our research proposes a novel Intrusion Detection System (IDS) utilizing a 1D Convolutional Neural Network (1DCNN-IDS) model specifically designed to identify DDoS threats within SDN environments. To refine feature selection and enhance detection accuracy, we applied a hybrid objective function incorporating the Akaike Information Criterion (AIC), F-test (ANOVA), and T-test. The effectiveness of our model was validated using three diverse datasets: InSDN, CICIDS2017, and UNSW-NB15, achieving impressive accuracies of over 98%, 96%, and 92% respectively, alongside high precision, recall, and F1 scores. These findings highlight the substantial potential of incorporating ML and Deep Learning (DL) techniques for effective and efficient intrusion detection in SDNs, highlighting our methodology’s contribution towards mitigating DDoS attack risks in these networks. [ABSTRACT FROM AUTHOR]

Software-defined vehicular networks (SDVN) is a promising technology for wireless data transmissions between vehicles. SDVN inherits software-defined networking principles and aims to improve the typical performance of safety and non-safety applications of vehicular adhoc networks. Consequently, enhancing the performance of Intelligent Transportation System (ITS). However, the performance of these ITS applications largely depends on the computational capability of the controller node, which involves creating or destroying a data path from the source vehicle to the destination vehicle and generating flow rules for the requests coming from the data plane elements. As a result, SDVN often suffers from the problems of overburdening the controller node with route requests under heavy traffic generation at vehicles and single-point controller failure. To counter these problems, solutions based on multiple controllers are proposed. In fact, the load-balancing problem remains an important issue. So, routing of data with multiple controllers and load-balancing, both topics in SDVN, go hand in hand. In this paper, we survey this state-of-the-art that discusses the above-mentioned challenges, starting with the SDVN preliminaries. We scrutinize the existing routing methodologies and also discuss load-balancing techniques. Furthermore, we provide real-time applications and services of SDVN, discuss trending research, potential future research directions, and the real-life applicability of SDVN that have not been addressed previously. [ABSTRACT FROM AUTHOR]

The traditional routing method makes use of limited information on the network links to make routing decisions, which makes it difficult to adapt to the dynamic and complex network and adjust the router's forward strategy. To address these issues, this paper proposes an intelligent routing method based on the Software Defined Network (SDN), Dueling DQN (a Deep Reinforcement Learning algorithm) and network traffic state prediction. First, the global network awareness information is obtained with the SDN network measurement mechanism, which is converted into a traffic matrix consisting of multiple network link status information such as bandwidth and delay, etc. Then, the optimal forwarding route under the current network state is generated by predicting the network traffic matrix and the Dueling DQN. The experimental results show that: (1) compared with the traditional Dijkstra and OSPF routing methods, the proposed method significantly improves the network throughput and effectively reduces the network delay and packet loss rate; (2) comparing with the reinforcement learning algorithms DDPG and PPO, the proposed approach achieves a faster convergence state, which improves the efficiency of network routing. [ABSTRACT FROM AUTHOR]

Adoption of Software-Defined Networks(SDN) as a new networking paradigm, promises solutions for Quality of Service(QoS) management issues raised at the service providers level due to the massive increase in connected devices (e.g., Servers, Mobile devices, M2M, Things, etc.), traffic in between, and the diverse user and service demands (e.g., delay, bandwidth, etc.). Although its advantage in network control flexibility compared to traditional networking, SDN still requires a design of robust and fast QoS guaranteeing routing algorithms due to its central control computation overhead. In this article, we present a new QoS-aware routing algorithm designed to work on top of SDN and serves delay-sensitive services that require certain delay requirements with low computation time. Such problems are usually modeled as Delay Constrained Least Cost (DCLC) problem which is a well-known NP-hard problem. We adopted the Lagrangian relaxation-based approach that incorporates the delay constraint into the objective cost function to solve the DCLC problem. Differently than existing Lagrangian relaxation-based algorithms, we designed our algorithm to reduce the solution search space by exploiting the problem lower-bound cost and delay paths. Moreover, we defined three different constraint tightness factors inferred from the problem current state to avoid extra non-useful Dijkstra calls. To improve the solution quality, we propose a novel approach that use state information obtained from previous optimization iterations to obtain a small-size network subgraph. Then it search the obtained subgraph for a better solution that the Lagrangian relaxation-based approach may miss. We performed an extensive python-based simulation to evaluate the performance of MODLARAC and compared it with two Lagrangian relaxation-based heuristic algorithms proposed in the literature to solve the DCLC problem, LARAC, and BiLAD algorithms. The obtained results showed improvement up to a 15% reduction in internal Dijkstra calls count with about a 2% increase in the total path cost compared to those obtained by the optimal solution. [ABSTRACT FROM AUTHOR]

A web search, an online video, a connected Nest device, and hundreds of cloud services all give us a response in a fraction of a second. But what really happens when we click search or send a request. The request travels over the public internet and into fiber network. Millions of requests or packets of data travel through miles of cable over land and under sea, converging at one of the many data centers that operate all over the world. Data Center (DC) is the core site of data operation, storage and forwarding, which is also an important part of cloud platform. A large number of commercial switches and servers are usually deployed at the DC. The DC is a complex set of facilities. Data center networks (DCN) is a network applied in the DC, because the traffic in DC presents the typical characteristics of centralized exchange data and increased traffic, which puts forward further requirements for the DCN. DCN connects a large-scale server cluster and is a bridge for data transmission and storage. With the expansion of DC and the increasing number of service types, communication within data centers becomes more frequent. On the other hand, traffic between data centers has also increased dramatically. Considering the multi-layered transmission mode and traffic characteristics of DCN, this paper proposes a software defined networking (SDN) -based multi-layered traffic scheduling scheme for DCN, which is mainly focused on hop count, criticality and cost. Moreover, based on SDN architecture and Deep Q-Network of Reinforcement Learning (RL), the intelligent multi-layered traffic scheduling scheme is proposed to obtain the current optimal global routing strategy according to the real-time traffic demand in the network. The simulation results show that the proposed scheme outperforms benchmarks in terms of average throughput, normalized total throughput, link bandwidth utilization, average round-trip time and network traffic bandwidth loss rate. [ABSTRACT FROM AUTHOR]