{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T15:59:38Z","timestamp":1776182378622,"version":"3.50.1"},"reference-count":51,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2023,3,26]],"date-time":"2023-03-26T00:00:00Z","timestamp":1679788800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>Nowdays, DNNs (Deep Neural Networks) are widely used in the field of DDoS attack detection. However, designing a good DNN architecture relies on the designer\u2019s experience and requires considerable work. In this paper, a GA (genetic algorithm) is used to automatically generate the DNN architecture for DDoS detection to minimize human intervention in the design process. Furthermore, given the complexity of contemporary networks and the diversity of DDoS attacks, the objective of this paper is to generate a DNN model that boasts superior performance, real-time capability, and generalization ability to tackle intricate network scenarios. This paper presents a fitness function that guarantees the best model generated possesses a specific level of real-time capability. Additionally, the proposed method employs multiple datasets to joint models generated, thereby enhancing the model\u2019s generalization performance. This paper conducts several experiments to validate the viability of the proposed method. Firstly, the best model generated with one dataset is compared with existing DNN models on the CICDDoS2019 dataset. The experimental results indicate that the model generated with one dataset has higher precision and F1-score than the existing DNN models. Secondly, model generation experiments are conducted on the CICIDS2017 and CICIDS2018 datasets, and the best model generated still performs well. Finally, this paper conducts comparative experiments on multiple datasets using the best model generated with six datasets and the best model generated by existing methods. The experimental results demonstrate that the best model generated with six datasets has better generalization ability and real-time capability.<\/jats:p>","DOI":"10.3390\/fi15040122","type":"journal-article","created":{"date-parts":[[2023,3,27]],"date-time":"2023-03-27T01:38:36Z","timestamp":1679881116000},"page":"122","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["A DNN Architecture Generation Method for DDoS Detection via Genetic Alogrithm"],"prefix":"10.3390","volume":"15","author":[{"given":"Jiaqi","family":"Zhao","sequence":"first","affiliation":[{"name":"School of Cyberspace, Hangzhou Dianzi University, Hangzhou 310018, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9332-5258","authenticated-orcid":false,"given":"Ming","family":"Xu","sequence":"additional","affiliation":[{"name":"School of Cyberspace, Hangzhou Dianzi University, Hangzhou 310018, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yunzhi","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Information Engineering, Hangzhou Vocational & Technical College, Hangzhou 310018, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guoliang","family":"Xu","sequence":"additional","affiliation":[{"name":"School of Cyberspace, Hangzhou Dianzi University, Hangzhou 310018, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2023,3,26]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"47","DOI":"10.9790\/0661-16114752","article-title":"An overview of intrusion detection and prevention systems (IDPS) and security issues","volume":"16","author":"Sharifi","year":"2014","journal-title":"IOSR J. Comput. Eng."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Alshamrani, A., Chowdhary, A., Pisharody, S., Lu, D., and Huang, D. (2017, January 21\u201325). A defense system for defeating DDoS attacks in SDN based networks. Proceedings of the 15th ACM International Symposium on Mobility Management and Wireless Access, Miami, FL, USA.","DOI":"10.1145\/3132062.3132074"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"425","DOI":"10.1007\/s13369-017-2414-5","article-title":"DDoS attack detection and mitigation using SDN: Methods, practices, and solutions","volume":"42","author":"Bawany","year":"2017","journal-title":"Arab. J. Sci. Eng."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Yaser, A.L., Mousa, H.M., and Hussein, M. (2022). Improved DDoS Detection Utilizing Deep Neural Networks and Feedforward Neural Networks as Autoencoder. Future Internet, 14.","DOI":"10.3390\/fi14080240"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Thapa, N., Liu, Z., Kc, D.B., Gokaraju, B., and Roy, K. (2020). Comparison of machine learning and deep learning models for network intrusion detection systems. Future Internet, 12.","DOI":"10.3390\/fi12100167"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"80813","DOI":"10.1109\/ACCESS.2019.2922196","article-title":"A survey on distributed denial of service (DDoS) attacks in SDN and cloud computing environments","volume":"7","author":"Dong","year":"2019","journal-title":"IEEE Access"},{"key":"ref_7","unstructured":"Sridaran, R. (2022, November 25). An Overview of DDoS Attacks in Cloud Environment. Available online: https:\/\/www.researchgate.net\/profile\/R-Sridaran\/publication\/273776292_An_Overview_of_DDoS_Attacks_in_Cloud_Environment\/links\/550d4d5e0cf275261098523d\/An-Overview-of-DDoS-Attacks-in-Cloud-Environment.pdf."},{"key":"ref_8","first-page":"4500","article-title":"A slow ddos attack detection mechanism using feature weighing and ranking","volume":"3","author":"Swe","year":"2021","journal-title":"Int. Conf. Ind. Eng. Oper. Manag."},{"key":"ref_9","unstructured":"Glorot, X., and Bengio, Y. (2010, January 13\u201315). Understanding the difficulty of training deep feedforward neural networks. Proceedings of the Thirteenth International Conference on Artificial Intelligence and Statistics JMLR Workshop and Conference Proceedings, Chia Laguna Resort, Sardinia, Italy."},{"key":"ref_10","first-page":"15","article-title":"DoS and DDoS attacks: Defense, detection and traceback mechanisms\u2014A survey","volume":"14","author":"Prasad","year":"2014","journal-title":"Glob. J. Comput. Sci. Technol."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Mohammed, S.S., Hussain, R., Senko, O., Bimaganbetov, B., Lee, J., Hussain, F., Kerrache, C.A., Barka, E., and Bhuiyan, M.Z.A. (2018, January 15\u201317). A new machine learning-based collaborative DDoS mitigation mechanism in software-defined network. Proceedings of the 14th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob), Limassol, Cyprus.","DOI":"10.1109\/WiMOB.2018.8589104"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Alotaibi, A., and Rassam, M.A. (2023). Adversarial Machine Learning Attacks against Intrusion Detection Systems: A Survey on Strategies and Defense. Future Internet, 15.","DOI":"10.3390\/fi15020062"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Said Elsayed, M., Le-Khac, N.A., Dev, S., and Jurcut, A.D. (2019). Machine-Learning Techniques for Detecting Attacks in SDN. arXiv.","DOI":"10.1109\/ICCSNT47585.2019.8962519"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"2046","DOI":"10.1109\/SURV.2013.031413.00127","article-title":"A survey of defense mechanisms against distributed denial of service (DDoS) flooding attacks","volume":"15","author":"Zargar","year":"2013","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"5320","DOI":"10.1007\/s11227-019-02945-z","article-title":"Distributed denial of service attacks and its defenses in IoT: A survey","volume":"76","author":"Salim","year":"2020","journal-title":"J. Supercomput."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Wang, H., and Li, W. (2021). DDosTC: A transformer-based network attack detection hybrid mechanism in SDN. Sensors, 21.","DOI":"10.3390\/s21155047"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Javeed, D., Gao, T., and Khan, M.T. (2021). SDN-enabled hybrid DL-driven framework for the detection of emerging cyber threats in IoT. Electronics, 10.","DOI":"10.3390\/electronics10080918"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1145\/2491185.2491199","article-title":"Towards secure and dependable software-defined networks","volume":"8","author":"Kreutz","year":"2013","journal-title":"Second. Acm Sigcomm Workshop Hot Top. Softw. Defin. Netw."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Alaoui, R.L., and Nfaoui, E.H. (2022). Deep learning for vulnerability and attack detection on web applications: A systematic literature review. Future Internet, 14.","DOI":"10.3390\/fi14040118"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"3542","DOI":"10.1109\/COMST.2018.2839348","article-title":"Comparative analysis of control plane security of SDN and conventional networks","volume":"20","author":"Abdou","year":"2018","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_21","first-page":"3217542","article-title":"An experiment on the use of genetic algorithms for topology selection in deep learning","volume":"2019","author":"Mattioli","year":"2019","journal-title":"J. Electr. Comput. Eng."},{"key":"ref_22","unstructured":"Xiao, X., Yan, M., Basodi, S., Ji, C., and Pan, Y. (2020). Efficient hyperparameter optimization in deep learning using a variable length genetic algorithm. arXiv."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"9855022","DOI":"10.1155\/2022\/9855022","article-title":"Autoencoder for design of mitigation model for DDOS attacks via M-DBNN","volume":"2022","author":"Agrawal","year":"2022","journal-title":"Wirel. Commun. Mob. Comput."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Saha, S., Sairam, A.S., Yadav, A., and Ekbal, A. (2012, January 3\u20135). Genetic algorithm combined with support vector machine for building an intrusion detection system. Proceedings of the International Conference on Advances in Computing, Communications and Informatics, Chennai, India.","DOI":"10.1145\/2345396.2345489"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"2322","DOI":"10.11591\/eei.v11i4.3835","article-title":"Distributed denial of service attacks detection for software defined networks based on evolutionary decision tree model","volume":"11","author":"Kamel","year":"2022","journal-title":"Bull. Electr. Eng. Inform."},{"key":"ref_26","first-page":"521","article-title":"DDoS attack detection scheme using hybrid ensemble learning and GA for internet of things","volume":"18","author":"Erfan","year":"2021","journal-title":"Palarch\u2019S J. Archaeol. Egypt\/Egyptol."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Chiba, Z., Abghour, N., Moussaid, K., El Omri, A., and Rida, M. (2019;, January 27\u201328). Smart approach to build a deep neural network based ids for cloud environment using an optimized genetic algorithm. Proceedings of the 2nd International Conference on Networking, Information Systems & Security, Rabat, Morocoo.","DOI":"10.1145\/3320326.3320394"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Zainudin, A., Ahakonye, L.A.C., Akter, R., Kim, D.S., and Lee, J.M. (2022). An efficient hybrid-dnn for ddos detection and classification in software-defined iiot networks. IEEE Internet Things J.","DOI":"10.1109\/JIOT.2022.3196942"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"716","DOI":"10.37394\/23203.2020.15.72","article-title":"An enhanced deep autoencoder-based approach for DDoS attack detection","volume":"15","author":"Sindian","year":"2020","journal-title":"Wseas Trans. Syst. Control"},{"key":"ref_30","first-page":"102804","article-title":"Attack classification of an intrusion detection system using deep learning and hyperparameter optimization","volume":"58","author":"Kunang","year":"2021","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Huang, S., Li, X., Cheng, Z., Zhang, Z., and Hauptmann, A. (2018). Gnas: A greedy neural architecture search method for multi-attribute learning. arXiv.","DOI":"10.1145\/3240508.3240588"},{"key":"ref_32","first-page":"281","article-title":"Random search for hyper-parameter optimization","volume":"13","author":"Bergstra","year":"2012","journal-title":"J. Mach. Learn. Res."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"761","DOI":"10.1007\/s10207-019-00434-1","article-title":"DDoS attack detection with feature engineering and machine learning: The framework and performance evaluation","volume":"18","author":"Aamir","year":"2019","journal-title":"Int. J. Inf. Secur."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"255","DOI":"10.1126\/science.aaa8415","article-title":"Machine learning: Trends, perspectives, and prospects","volume":"349","author":"Jordan","year":"2015","journal-title":"Science"},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Shafique, M., Hafiz, R., Javed, M.U., Abbas, S., Sekanina, L., Vasicek, Z., and Mrazek, V. (2017, January 3\u20135). Adaptive and energy-efficient architectures for machine learning: Challenges, opportunities, and research roadmap. Proceedings of the 2017 IEEE Computer society annual symposium on VLSI (ISVLSI), Bochum, Germany.","DOI":"10.1109\/ISVLSI.2017.124"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Huang, C., Li, Y., Loy, C.C., and Tang, X. (2016, January 27\u201330). Learning deep representation for imbalanced classification. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Las Vegas, NV, USA.","DOI":"10.1109\/CVPR.2016.580"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"27","DOI":"10.1186\/s40537-019-0192-5","article-title":"Survey on deep learning with class imbalance","volume":"6","author":"Johnson","year":"2019","journal-title":"J. Big Data"},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"1047","DOI":"10.1016\/j.asoc.2014.08.025","article-title":"A comparative review of approaches to prevent premature convergence in GA","volume":"24","author":"Pandey","year":"2014","journal-title":"Appl. Soft Comput."},{"key":"ref_39","unstructured":"Mathew, T.V. (2022, November 18). Genetic Algorithm. Report Submitted at IIT Bombay. Available online: http:\/\/datajobstest.com\/data-science-repo\/Genetic-Algorithm-Guide-[Tom-Mathew].pdf."},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Pham, T.A., Tran, V.Q., Vu, H.L.T., and Ly, H.B. (2020). Design deep neural network architecture using a genetic algorithm for estimation of pile bearing capacity. PLoS ONE, 15.","DOI":"10.1371\/journal.pone.0243030"},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"8091","DOI":"10.1007\/s11042-020-10139-6","article-title":"A review on genetic algorithm: Past, present, and future","volume":"80","author":"Katoch","year":"2021","journal-title":"Multimed. Tools Appl."},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"147","DOI":"10.1016\/j.cose.2019.06.005","article-title":"A survey of network-based intrusion detection data sets","volume":"86","author":"Ring","year":"2019","journal-title":"Comput. Secur."},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"4729","DOI":"10.1109\/TGRS.2017.2698503","article-title":"Learning andtransferring deep joint spectral-spatial features for hyper-spectral classification","volume":"55","author":"Yang","year":"2017","journal-title":"IEEE Trans. Geosci. Remote Sens."},{"key":"ref_44","first-page":"523","article-title":"One-hot encoding and convolutional neural network based anomaly detection","volume":"59","author":"Jie","year":"2019","journal-title":"J. Tsinghua Univ. (Sci. Technol.)"},{"key":"ref_45","first-page":"1929","article-title":"Dropout: A simple way to prevent neural networks from overfitting","volume":"15","author":"Srivastava","year":"2014","journal-title":"J. Mach. Learn. Res."},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"321","DOI":"10.1613\/jair.953","article-title":"SMOTE: Synthetic minority over-sampling technique","volume":"16","author":"Chawla","year":"2002","journal-title":"J. Artif. Intell. Res."},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"Elsayed, M.S., Le-Khac, N.A., Dev, S., and Jurcut, A.D. (September, January 31). Ddosnet: A deep-learning model for detecting network attacks. Proceedings of the 2020 IEEE 21st International Symposium on \u201cA World of Wireless, Mobile and Multimedia Networks\u201d (WoWMoM), Cork, Ireland.","DOI":"10.1109\/WoWMoM49955.2020.00072"},{"key":"ref_48","doi-asserted-by":"crossref","unstructured":"Chartuni, A., and M\u00e1rquez, J. (2021). Multi-Classifier of DDoS Attacks in Computer Networks Built on Neural Networks. Appl. Sci., 11.","DOI":"10.3390\/app112210609"},{"key":"ref_49","doi-asserted-by":"crossref","first-page":"114520","DOI":"10.1016\/j.eswa.2020.114520","article-title":"Detection of DDoS attacks with feed forward based deep neural network model","volume":"169","author":"Cil","year":"2021","journal-title":"Expert Syst. Appl."},{"key":"ref_50","doi-asserted-by":"crossref","unstructured":"Mahadik, S.S., Pawar, P., and Muthalagu, R. (2022, November 18). Edge-HetIoT Defense against DDoS Attack Using LearningTechniques. Available online: https:\/\/assets.researchsquare.com\/files\/rs-2164979\/v1_covered.pdf?c=1668326371.","DOI":"10.21203\/rs.3.rs-2164979\/v1"},{"key":"ref_51","unstructured":"Rangapur, A., Kanakam, T., and Jubilson, A. (2022). DDoSDet: An approach to Detect DDoS attacks using Neural Networks. arXiv."}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/15\/4\/122\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T19:03:23Z","timestamp":1760123003000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/15\/4\/122"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,26]]},"references-count":51,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2023,4]]}},"alternative-id":["fi15040122"],"URL":"https:\/\/doi.org\/10.3390\/fi15040122","relation":{},"ISSN":["1999-5903"],"issn-type":[{"value":"1999-5903","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,26]]}}}