A Framework for Detecting and Mitigating DDoS Attacks in Software-Defined IoT Networks
dc.contributor.author | Sun, Pengxiang | |
dc.contributor.copyright-release | Not Applicable | |
dc.contributor.degree | Master of Computer Science | |
dc.contributor.department | Faculty of Computer Science | |
dc.contributor.ethics-approval | Not Applicable | |
dc.contributor.external-examiner | NA | |
dc.contributor.manuscripts | Not Applicable | |
dc.contributor.thesis-reader | Dr.Yujie Tang | |
dc.contributor.thesis-reader | Dr.Darshana Upadhyay | |
dc.contributor.thesis-supervisor | Dr.Srinivas Sampalli | |
dc.date.accessioned | 2025-04-29T14:24:11Z | |
dc.date.available | 2025-04-29T14:24:11Z | |
dc.date.defence | 2025-04-21 | |
dc.date.issued | 2025-04-29 | |
dc.description | This thesis presents a framework for DDoS detection in SD-IoT networks, including dataset generation, DDoS detection and mitigation. | |
dc.description.abstract | The integration of Internet of Things (IoT) technology and Software-Defined Networking (SDN) into Software-Defined IoT (SD-IoT) creates new opportunities while introducing significant security challenges. An emerging area of research is the detection and mitigation of DDoS attack on SD-IoT networks. Many existing DDoS intrusion detection methods rely on outdated datasets. This thesis presents a framework for DDoS detection and mitigation in SD-IoT. A novel approach is introduced for extracting informative features from network traffic and generating datasets. In the detection phase, generated datasets are used to train machine learning models for DDoS detection. For mitigation, a strategy combining micro-segmentation with Attribute-Based Access Control (ABAC) is proposed, enabling effective attack containment and establishing a robust defense-in-depth framework. The results demonstrate the importance of the extracted features in training machine learning models for DDoS detection. A use case further illustrates the efficiency of the proposed micro-segmentation method in mitigating DDoS attacks. | |
dc.identifier.uri | https://hdl.handle.net/10222/85067 | |
dc.language.iso | en | |
dc.subject | DDoS | |
dc.subject | SDN | |
dc.subject | IoT | |
dc.subject | Machine Learning - based Intrusion Detection System | |
dc.subject | Micro-segmentation | |
dc.subject | Attributes Based Access Control | |
dc.title | A Framework for Detecting and Mitigating DDoS Attacks in Software-Defined IoT Networks |
Files
Original bundle
1 - 1 of 1
Loading...
- Name:
- PengxiangSun2025.pdf
- Size:
- 2.66 MB
- Format:
- Adobe Portable Document Format
- Description:
- Change 'List of Acronyms' to 'List of Abbreviations' in Preliminary pages.
License bundle
1 - 1 of 1
No Thumbnail Available
- Name:
- license.txt
- Size:
- 2.12 KB
- Format:
- Item-specific license agreed upon to submission
- Description: