Research Article
DDoS Attack Detection and Classification Using Hybrid Model for Multicontroller SDN
Table 2
Comparison selective of four proposed methods.
| | Algorithm type | Attack type | Performance matrices | | Accuracy (%) | Precision | Recall | F1-score |
| | RNN (with feature selection) | BENIGN | 98.6 | 0.00 | 0.00 | 0.00 | | DrDoS_LDAP | 1.00 | 1.00 | 1.00 | | DrDoS_UDP | 0.99 | 1.00 | 1.00 | | SYN | 0.97 | 0.99 | 0.98 | | UDP-lag | 0.97 | 0.98 | 0.97 | | WebDDoS | 0.00 | 0.00 | 0.00 |
| | GRU (with feature selection) | BENIGN | 96.4 | 0.00 | 0.00 | 0.00 | | DrDoS_LDAP | 1.00 | 1.00 | 1.00 | | DrDoS_UDP | 0.90 | 0.99 | 0.94 | | SYN | 1.00 | 0.97 | 0.99 | | UDP-lag | 0.98 | 0.91 | 0.94 | | WebDDoS | 0.00 | 0.00 | 0.00 |
| | MLP (with feature selection) | BENIGN | 98.3 | 0.96 | 0.34 | 0.50 | | DrDoS_LDAP | 0.99 | 1.00 | 0.99 | | DrDoS_UDP | 0.98 | 0.98 | 0.98 | | SYN | 1.00 | 0.98 | 0.99 | | UDP-lag | 0.97 | 0.98 | 0.98 | | WebDDoS | 0.00 | 0.00 | 0.00 |
| | LSTM with feature selection (proposed solution) | BENIGN | 99.42 | 0.78 | 0.63 | 0.70 | | DrDoS_LDAP | 1.00 | 1.00 | 1.00 | | DrDoS_UDP | 0.99 | 1.00 | 1.00 | | SYN | 1.00 | 0.99 | 1.00 | | UDP-lag | 1.00 | 0.99 | 0.99 | | WebDDoS | 0.00 | 0.00 | 0.00 |
|
|
