Suppr超能文献

具有MAC认证和基于GAN的入侵检测的多层软件定义网络安全

Multilayered SDN security with MAC authentication and GAN-based intrusion detection.

作者信息

Kiran Singh Nayak Nanavath, Bhattacharyya Budhaditya

机构信息

School of Electronics Engineering, Vellore Institute of Technology, Vellore, Tamil Nadu, India.

出版信息

PLoS One. 2025 Sep 4;20(9):e0331470. doi: 10.1371/journal.pone.0331470. eCollection 2025.

Abstract

Computer networks are highly vulnerable to cybersecurity intrusions. Likewise, software-defined networks (SDN), which enable 5G users to broadcast sensitive data, have become a primary target for vulnerability. To protect the network security against attacks, various security protocols, including authorization, the authentication process, and intrusion detection techniques, are essential. However, there are several intrusion detection strategies, but the most prevalent methods show low accuracy and high false positives. To overcome these problems, this research work presents a novel four-Q curve authentication system based on Media Access Control (MAC) addresses for a multilayered SDN intrusion detection system utilizing deep learning techniques to identify and prevent attacks. The Four-Q curve authentication system leverages elliptic curve cryptography, a high-performance algorithm that improves authentication security and computational efficiency. Initially, Four-Q curve authentication is performed, followed by univariate ensemble feature selection to select optimal switches. Then, the data collected through the switches are classified as normal, assault, and suspect packets based on the Dual Discriminator Conditional Generative Adversarial Network (DDcGAN) approach. Further, the optimization of DDcGAN is accomplished using the Sheep Flock Optimization Algorithm (SFOA), whereas suspicious packets are categorized using the Growing Self-Organizing Map (GSOM). The DDcGAN-based intrusion detection system outperforms the state-of-the-art approaches in terms of accuracy, precision, F1 score, sensitivity, false-positive rate, power consumption, and network throughput. It achieved an accuracy of 98.29%, an F1 score of 0.975, and a precision of 95.8%. The system's true positive rate attained 99.04% at 50% malicious nodes, while the false alarm rate was as low as 2.05% under the same conditions. Moreover, the system exhibits 4.5% energy savings when compared to existing approaches.

摘要

计算机网络极易受到网络安全入侵。同样,使5G用户能够广播敏感数据的软件定义网络(SDN)已成为漏洞的主要目标。为了保护网络安全免受攻击,各种安全协议,包括授权、认证过程和入侵检测技术,都是必不可少的。然而,有几种入侵检测策略,但最普遍的方法显示出低准确性和高误报率。为了克服这些问题,本研究工作提出了一种基于媒体访问控制(MAC)地址的新型四Q曲线认证系统,用于多层SDN入侵检测系统,该系统利用深度学习技术来识别和防止攻击。四Q曲线认证系统利用椭圆曲线密码学,这是一种高性能算法,可提高认证安全性和计算效率。最初,执行四Q曲线认证,然后进行单变量集成特征选择以选择最佳交换机。然后,通过交换机收集的数据基于双鉴别器条件生成对抗网络(DDcGAN)方法被分类为正常、攻击和可疑数据包。此外,使用羊群优化算法(SFOA)完成DDcGAN的优化,而可疑数据包则使用生长自组织映射(GSOM)进行分类。基于DDcGAN的入侵检测系统在准确性、精确性、F1分数、灵敏度、误报率、功耗和网络吞吐量方面优于现有方法。它实现了98.29%的准确率、0.975的F1分数和95.8%的精确率。在50%恶意节点的情况下,系统的真阳性率达到99.04%,而在相同条件下误报率低至2.05%。此外,与现有方法相比,该系统节能4.5%。

https://cdn.ncbi.nlm.nih.gov/pmc/blobs/234d/12410795/2a543e652b49/pone.0331470.g001.jpg

文献检索

告别复杂PubMed语法,用中文像聊天一样搜索,搜遍4000万医学文献。AI智能推荐,让科研检索更轻松。

立即免费搜索

文件翻译

保留排版,准确专业,支持PDF/Word/PPT等文件格式,支持 12+语言互译。

免费翻译文档

深度研究

AI帮你快速写综述,25分钟生成高质量综述,智能提取关键信息,辅助科研写作。

立即免费体验