🤖 AI Summary
SDN networks suffer from weak security guarantees and coarse-grained traffic control. To address these challenges, this paper proposes an intelligent security framework integrating machine learning–based intrusion detection, blockchain-enabled immutable logging, and application-aware traffic regulation. Methodologically, it synergistically combines Hyperledger Fabric—a permissioned blockchain—with multiple IDS models (Random Forest, XGBoost, CatBoost, and CNN-BiLSTM) to achieve high-accuracy attack detection with low false positives, while ensuring tamper-proof, auditable, and traceable log provenance. Furthermore, the framework dynamically optimizes QoS provisioning and bandwidth allocation based on application-layer features. A prototype system is implemented atop Mininet with OpenDaylight/Ryu controllers and evaluated on the InSDN dataset. Results demonstrate real-time detection of diverse attacks—including DDoS and port scanning—and sustained QoS assurance for critical services under resource-constrained conditions.
📝 Abstract
With more and more existing networks being transformed to Software-Defined Networking (SDN), they need to be more secure and demand smarter ways of traffic control. This work, SmartSecChain-SDN, is a platform that combines machine learning based intrusion detection, blockchain-based storage of logs, and application-awareness-based priority in SDN networks. To detect network intrusions in a real-time, precision and low-false positives setup, the framework utilizes the application of advanced machine learning algorithms, namely Random Forest, XGBoost, CatBoost, and CNN-BiLSTM. SmartSecChain-SDN is based on the Hyperledger Fabric, which is a permissioned blockchain technology, to provide secure, scalable, and privacy-preserving storage and, thus, guarantee that the Intrusion Detection System (IDS) records cannot be altered and can be analyzed comprehensively. The system also has Quality of Service (QoS) rules and traffic shaping based on applications, which enables prioritization of critical services, such as VoIP, video conferencing, and business applications, as well as de-prioritization of non-essential traffic, such as downloads and updates. Mininet can simulate real-time SDN scenarios because it is used to prototype whole architectures. It is also compatible with controllers OpenDaylight and Ryu. It has tested the framework using the InSDN dataset and proved that it can identify different kinds of cyberattacks and handle bandwidth allocation efficiently under circumstances of resource constraints. SmartSecChain-SDN comprehensively addresses SDN system protection, securing and enhancing. The proposed study offers an innovative, extensible way to improve cybersecurity, regulatory compliance, and the administration of next-generation programmable networks.