Distributed Denial-of-Service Attack Detection Using One-Dimensional Convolutional Neural Network in Airline Reservation Systems (ARS)

Dhurgham Kareem Gharkan (1), Bahaa Kareem Mohammed (2), Hussein Ali Salah (3), Mariana Mocanu (4)
(1) Department of Medical Instruments Techniques, Middle Technical University, Technical Institute Kut, Baghdad, Iraq
(2) Department of Medical Instruments Techniques, Middle Technical University, Technical Institute Kut, Baghdad, Iraq
(3) Department of Computer Systems, Middle Technical University, Technical Institute- Suwaira, Baghdad, Iraq
(4) Computer Science Department, National University for Science and Technology Politehnica Bucharest, Romania
Fulltext View | Download
How to cite (IJASEIT) :
Kareem Gharkan , D., Kareem Mohammed, B., Ali Salah, H., & Mocanu, M. (2024). Distributed Denial-of-Service Attack Detection Using One-Dimensional Convolutional Neural Network in Airline Reservation Systems (ARS). International Journal of Advanced Science Computing and Engineering, 6(3), 123–128. https://doi.org/10.62527/ijasce.6.3.202

A prevalent and perilous in the contemporary are Distributed Denial of Service (DDoS) attacks. in which attackers attempted to prevent authorized users from accessing internet services by deploying many attack workstations. This research presents a detection approach based on One Dimension Convolutional Neural Networks, which has created an innovative approach for detecting DDoS attacks that addresses the limitations of conventional methods. The primary objective of this study was to analyze and detect DDoS attacks through the examination of a dataset about the booking of airline tickets. The present investigation utilized the APA-DDoS dataset, comprising two discrete categories: benign traffic and DDoS traffic. Wireshark was utilized to simulate airline data as well. Utilized as one-dimension convolutional neural network (1D CNN) technology, the model achieved an accuracy rating of 99.5%. The experimental outcomes demonstrated that the proposed model effectively and consistently identified DDoS attacks. Solid ability to differentiate between legitimate and malicious traffic has been exhibited by the system, thereby ensuring network security.

J. Bhajo, S. A. Shah, S. Hameed, A. Ahmed, J. Nasir, and D. Draheim, "Towards a machine learning-based framework for DDOS attack detection in software-defined IoT (SD-IoT) networks," Eng. Appl. Artif. Intell., vol. 123, p. 106432, 2023, doi:10.1016/j.engappai.2023.106432.

R. F. Fouladi, O. Ermiş, and E. Anarim, "A novel approach for distributed denial of service defense using continuous wavelet transform and convolutional neural network for software-defined network," Comput. Secur., vol. 112, p. 102524, 2022, doi:10.1016/j.cose.2021.102524.

D. K. Gharkan and A. A. Abdulrahman, "Construct an efficient distributed denial of service attack detection system based on data mining techniques," Indones. J. Electr. Eng. Comput. Sci., vol. 29, no. 1, pp. 591–597, 2023, doi: 10.11591/ijeecs.v29.i1.pp591-597.

O. Belej and L. Halkiv, "Using hybrid neural networks to detect DDOS attacks," in Proc. 2020 IEEE 3rd Int. Conf. Data Stream Mining Process. (DSMP), 2020, pp. 61–66, doi:10.1109/DSMP47368.2020.9204166.

B. M. Rahal, A. Santos, and M. Nogueira, "A distributed architecture for DDoS prediction and bot detection," IEEE Access, vol. 8, pp. 159756–159772, 2020, doi: 10.1109/ACCESS.2020.3020507.

J. Bhajo, R. Jafaq, A. Ahmed, S. Hameed, and S. A. Shah, "A time-efficient approach toward DDoS attack detection in IoT network using SDN," IEEE Internet Things J., vol. 9, no. 5, pp. 3612–3630, Mar. 2021, doi: 10.1109/JIOT.2021.3098029.

P. Kumari and A. K. Jain, "A comprehensive study of DDoS attacks over IoT network and their countermeasures," Comput. Secur., vol. 127, p. 103096, 2023, doi: 10.1016/j.cose.2023.103096.

A. Mathew, P. Amudha, and S. Sivakumari, "Deep learning techniques: an overview," in Adv. Mach. Learn. Technol. Appl. Proc. AMLTA 2020, 2021, pp. 599–608, doi: 10.1007/978-981-15-3383-9_54.

A. R. Shaaban, E. Abdelwaness, and M. Hussein, "TCP and HTTP flood DDoS attack analysis and detection for space ground network," in Proc. 2019 IEEE Int. Conf. Vehicular Electron. Saf. (ICVES), 2019, pp. 1–6, doi: 10.1109/ICVES.2019.8906302.

B. Bala and S. Behal, "AI techniques for IoT-based DDoS attack detection: Taxonomies, comprehensive review and research challenges," Comput. Sci. Rev., vol. 52, p. 100631, 2024, doi:10.1016/j.cosrev.2024.100631.

A. R. Shaaban, E. Abd-Elwanis, and M. Hussein, "DDoS attack detection and classification via convolutional neural network (CNN)," in Proc. 2019 IEEE 9th Int. Conf. Intell. Comput. Inf. Syst. (ICICIS), 2019, pp. 233–238, doi: 10.1109/ICICIS46948.2019.9014826.

R. S. Chaudhari and G. R. Talmale, "A review on detection approaches for distributed denial of service attacks," in Proc. Int. Conf. Intell. Sustain. Syst. (ICISS), 2019, pp. 323–327, doi:10.1109/ISS1.2019.8908125.

S. Sumathi and N. Karthikeyan, "Search for effective data mining algorithm for network based intrusion detection (NIDS)-DDOS attacks," in Proc. IEEE Int. Conf. Intell. Comput. Commun. Smart World, I2C2SW, 2018, pp. 41–45, doi:10.1109/I2C2SW45816.2018.8997522.

A. Saber, M. Abbas, and B. Fergani, "A DDoS attack detection system: Applying a hybrid genetic algorithm to optimal feature subset selection," in Proc. 4th Int. Symp. Informatics Appl. (ISIA), 2020, pp. 1–6, doi: 10.1109/ISIA51297.2020.9416558.

A. Bhati et al., "Evaluation of classification algorithms for distributed denial of service attack detection," in Proc. 2020 IEEE 3rd Int. Conf. Artif. Intell. Knowl. Eng. (AIKE), 2020, pp. 138–141, doi:10.1109/aike48582.2020.00030.

P. Preamthaisong et al., "Enhanced DDoS detection using hybrid genetic algorithm and decision tree for SDN," in Proc. 16th Int. Joint Conf. Comput. Sci. Softw. Eng. (JCSSE), 2019, pp. 152–157, doi:10.1109/jcsse.2019.8864216.

A. K. A. Al-Mashadani and M. Ilyas, "Distributed denial of service attack alleviated and detected by using mininet and software defined network," Webology, vol. 19, no. 1, pp. 4129–4144, 2022, doi:10.14704/web/v19i1/web19272.

Yashwanth, K. A. P. "APA-DDOS Dataset," Kaggle, 2024. [Online]. Available: https://www.kaggle.com/datasets/yashwanthkumbam/APADDoS-dataset (accessed May 26, 2024).

A. E. Abdallah et al., "Detection of management-frames-based denial-of-service attack in wireless LAN network using artificial neural network," Sensors, vol. 23, no. 5, p. 2663, 2023, doi:10.3390/s23052663.

A. Fathima, G. S. Devi, and M. Faizaanuddin, "Improving distributed denial of service attack detection using supervised machine learning," Meas. Sensors, vol. 30, p. 100911, 2023, doi:10.1016/j.measen.2023.100911.

M. A. Aladaileh et al., "Detection techniques of distributed denial of service attacks on software-defined networking controller—A review," IEEE Access, vol. 8, pp. 143985–143995, 2020, doi:10.1109/access.2020.3013998.

N. Nishanth and A. Mujeeb, "Modeling and detection of flooding-based denial-of-service attack in wireless ad hoc network using Bayesian inference," IEEE Syst. J., vol. 15, no. 1, pp. 17–26, 2021, doi: 10.1109/JSYST.2020.2984797.

F. J. Abdullayeva, "Distributed denial of service attack detection in E-government cloud via data clustering," Array, vol. 15, p. 100229, 2022, doi: 10.1016/j.array.2022.100229.

I. Ahmad, Z. Wan, and A. Ahmad, "A big data analytics for DDOS attack detection using optimized ensemble framework in Internet of Things," Internet Things, vol. 23, p. 100825, 2023, doi:10.1016/j.iot.2023.100825.