ML-Based Detection of DDoS Attacks Using Evolutionary Algorithms Optimization

• Published in: Sensors (Basel, Switzerland) Vol. 24; no. 5; p. 1672
• Main Authors: Talpur, Fauzia, Korejo, Imtiaz Ali, Chandio, Aftab Ahmed, Ghulam, Ali, Talpur, Mir. Sajjad Hussain
• Format: Journal Article
• Language: English
• Published: Switzerland MDPI AG 05.03.2024; MDPI
• Subjects: Algorithms; Analysis; Artificial intelligence; Cyberterrorism; Datasets; DDoS; Denial of service attacks; Genetic algorithms; genetic programming; Learning strategies; Machine learning; Mathematical optimization; RF-GA; SVM-GA; TPOT; XGB-GA; Pakistan; genetic programming; XGB-GA; TPOT; RF-GA; DDoS; SVM-GA; machine learning
• ISSN: 1424-8220; 1424-8220
• DOI: 10.3390/s24051672

The escalating reliance of modern society on information and communication technology has rendered it vulnerable to an array of cyber-attacks, with distributed denial-of-service (DDoS) attacks emerging as one of the most prevalent threats. This paper delves into the intricacies of DDoS attacks, which exploit compromised machines numbering in the thousands to disrupt data services and online commercial platforms, resulting in significant downtime and financial losses. Recognizing the gravity of this issue, various detection techniques have been explored, yet the quantity and prior detection of DDoS attacks has seen a decline in recent methods. This research introduces an innovative approach by integrating evolutionary optimization algorithms and machine learning techniques. Specifically, the study proposes XGB-GA Optimization, RF-GA Optimization, and SVM-GA Optimization methods, employing Evolutionary Algorithms (EAs) Optimization with Tree-based Pipelines Optimization Tool (TPOT)-Genetic Programming. Datasets pertaining to DDoS attacks were utilized to train machine learning models based on XGB, RF, and SVM algorithms, and 10-fold cross-validation was employed. The models were further optimized using EAs, achieving remarkable accuracy scores: 99.99% with the XGB-GA method, 99.50% with RF-GA, and 99.99% with SVM-GA. Furthermore, the study employed TPOT to identify the optimal algorithm for constructing a machine learning model, with the genetic algorithm pinpointing XGB-GA as the most effective choice. This research significantly advances the field of DDoS attack detection by presenting a robust and accurate methodology, thereby enhancing the cybersecurity landscape and fortifying digital infrastructures against these pervasive threats.