Digital Twin-Enabled Intelligent DDoS Detection Mechanism For Autonomous Core Networks

Yigit, Yagmur; Bal, Bahadir; Karameseoglu, Aytac; Duong, Trung Q.; Canberk, Berk

Abstract

Existing distributed denial of service attack (DDoS) solutions cannot handle highly aggregated data rates; thus, they are unsuitable for Internet service provider (ISP) core networks. This article proposes a digital twin-enabled intelligent DDoS detection mechanism using an online learning method for autonomous systems. Our contributions are threefold: we first design a DDoS detection architecture based on the digital twin for ISP core networks. We implemented a Yet Another Next Generation (YANG) model and an automated feature selection (AutoFS) module to handle core network data. We used an online learning approach to update the model instantly and efficiently , improve the learning model quickly, and ensure accurate predictions. Finally, we reveal that our proposed solution successfully detects DDoS attacks and updates the feature selection method and learning model with a true classification rate of ninety-seven percent. Our proposed solution can estimate the attack within approximately fifteen minutes after the DDoS attack starts.

Citation

Yigit, Y., Bal, B., Karameseoglu, A., Duong, T. Q., & Canberk, B. (2022). Digital Twin-Enabled Intelligent DDoS Detection Mechanism For Autonomous Core Networks. IEEE Communications Standards Magazine, 6(3), 38-44. https://doi.org/10.1109/MCOMSTD.0001.2100022

• Journal Article Type: Article
• Online Publication Date: Sep 26, 2022
• Publication Date: 2022-09
• Deposit Date: Nov 1, 2022
• Journal: IEEE Communications Standards Magazine
• Print ISSN: 2471-2825
• Electronic ISSN: 2471-2833
• Publisher: Institute of Electrical and Electronics Engineers (IEEE)
• Peer Reviewed: Peer Reviewed
• Volume: 6
• Issue: 3
• Pages: 38-44
• DOI: https://doi.org/10.1109/MCOMSTD.0001.2100022
• Public URL: http://researchrepository.napier.ac.uk/Output/2947038