{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T15:10:09Z","timestamp":1784646609039,"version":"3.55.0"},"reference-count":44,"publisher":"MDPI AG","issue":"5","license":[{"start":{"date-parts":[[2024,4,29]],"date-time":"2024-04-29T00:00:00Z","timestamp":1714348800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>The ever-increasing diversity of Internet applications and the rapid evolution of network infrastructure due to emerging technologies have made network management more challenging. Effective traffic classification is critical for efficiently managing network resources and aligning with service quality and security demands. The centralized controller of software-defined networking provides a comprehensive network view, simplifying traffic analysis and offering direct programmability features. When combined with deep learning techniques, these characteristics enable the incorporation of intelligence into networks, leading to optimization and improved network management and maintenance. Therefore, this research aims to develop a model for traffic classification by application types and network attacks using deep learning techniques to enhance the quality of service and security in software-defined networking. The SEMMA method is employed to deploy the model, and the classifiers are trained with four algorithms, namely LSTM, BiLSTM, GRU, and BiGRU, using selected features from two public datasets. These results underscore the remarkable effectiveness of the GRU model in traffic classification. Hence, the outcomes achieved in this research surpass state-of-the-art methods and showcase the effectiveness of a deep learning model within a traffic classification in an SDN environment.<\/jats:p>","DOI":"10.3390\/fi16050153","type":"journal-article","created":{"date-parts":[[2024,4,29]],"date-time":"2024-04-29T04:26:16Z","timestamp":1714364776000},"page":"153","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":15,"title":["A Novel Traffic Classification Approach by Employing Deep Learning on Software-Defined Networking"],"prefix":"10.3390","volume":"16","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7737-3815","authenticated-orcid":false,"given":"Daniel","family":"Nu\u00f1ez-Agurto","sequence":"first","affiliation":[{"name":"Department of Computer Science, Universidad de las Fuerzas Armadas\u2014ESPE, Av. General Rumi\u00f1ahui S\/N, Sangolqu\u00ed 171103, Ecuador"},{"name":"Faculty of Computer Science, Universidad Nacional de La Plata, La Plata 1900, Argentina"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9427-5766","authenticated-orcid":false,"given":"Walter","family":"Fuertes","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Universidad de las Fuerzas Armadas\u2014ESPE, Av. General Rumi\u00f1ahui S\/N, Sangolqu\u00ed 171103, Ecuador"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8360-3717","authenticated-orcid":false,"given":"Luis","family":"Marrone","sequence":"additional","affiliation":[{"name":"Faculty of Computer Science, Universidad Nacional de La Plata, La Plata 1900, Argentina"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4543-0082","authenticated-orcid":false,"given":"Eduardo","family":"Benavides-Astudillo","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Universidad de las Fuerzas Armadas\u2014ESPE, Av. General Rumi\u00f1ahui S\/N, Sangolqu\u00ed 171103, Ecuador"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2859-5654","authenticated-orcid":false,"given":"Christian","family":"Coronel-Guerrero","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Universidad de las Fuerzas Armadas\u2014ESPE, Av. General Rumi\u00f1ahui S\/N, Sangolqu\u00ed 171103, Ecuador"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-4974-571X","authenticated-orcid":false,"given":"Franklin","family":"Perez","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Universidad de las Fuerzas Armadas\u2014ESPE, Av. General Rumi\u00f1ahui S\/N, Sangolqu\u00ed 171103, Ecuador"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2024,4,29]]},"reference":[{"key":"ref_1","unstructured":"Cisco (2018\u20132023). Cisco Annual Internet Report (2018\u20132023), Cisco. Available online: www.cisco.com\/c\/en\/us\/solutions\/collateral\/executive-perspectives\/annual-internet-report\/white-paper-c11-741490.html."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Belkadi, O., Vulpe, A., Laaziz, Y., and Halunga, S. (2023). ML-Based Traffic Classification in an SDN-Enabled Cloud Environment. Electronics, 12.","DOI":"10.3390\/electronics12020269"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"158","DOI":"10.1109\/MCOM.2018.1700560","article-title":"Machine Learning for Cognitive Network Management","volume":"56","author":"Ayoubi","year":"2018","journal-title":"IEEE Commun. Mag."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Clark, D.D., Partridge, C., Ramming, J.C., and Wroclawski, J.T. (2003, January 25\u201329). A Knowledge Plane for the Internet. Proceedings of the 2003 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, SIGCOMM\u201903, New York, NY, USA.","DOI":"10.1145\/863956.863957"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"2687","DOI":"10.1109\/COMST.2016.2553778","article-title":"A Survey on SDN Programming Languages: Toward a Taxonomy","volume":"18","author":"Trois","year":"2016","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"14","DOI":"10.1109\/JPROC.2014.2371999","article-title":"Software-Defined Networking: A Comprehensive Survey","volume":"103","author":"Kreutz","year":"2015","journal-title":"Proc. IEEE"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"393","DOI":"10.1109\/COMST.2018.2866942","article-title":"A Survey of Machine Learning Techniques Applied to Software Defined Networking (SDN): Research Issues and Challenges","volume":"21","author":"Xie","year":"2019","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Dovrolis, C. (2005). Passive and Active Network Measurement, Springer.","DOI":"10.1007\/b135479"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"56","DOI":"10.1109\/SURV.2008.080406","article-title":"A survey of techniques for internet traffic classification using machine learning","volume":"10","author":"Nguyen","year":"2008","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"1135","DOI":"10.1109\/SURV.2013.100613.00161","article-title":"A Survey of Payload-Based Traffic Classification Approaches","volume":"16","author":"Finsterbusch","year":"2014","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Li, G., Dong, M., Ota, K., Wu, J., Li, J., and Ye, T. (2016, January 4\u20138). Deep Packet Inspection Based Application-Aware Traffic Control for Software Defined Networks. Proceedings of the 2016 IEEE Global Communications Conference (GLOBECOM), Washington, DC, USA.","DOI":"10.1109\/GLOCOM.2016.7841721"},{"key":"ref_12","first-page":"1002","article-title":"Machine Learning-Based Traffic Classification in Software-Defined Networking: A Systematic Literature Review, Challenges, and Future Research Directions","volume":"49","author":"Fuertes","year":"2022","journal-title":"IAENG Int. J. Comput. Sci."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Fan, Z., and Liu, R. (2017, January 28\u201331). Investigation of machine learning based network traffic classification. Proceedings of the 2017 International Symposium on Wireless Communication Systems (ISWCS), Bologna, Italy.","DOI":"10.1109\/ISWCS.2017.8108090"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"102538","DOI":"10.1016\/j.jnca.2020.102538","article-title":"The rise of traffic classification in IoT networks: A survey","volume":"154","author":"Tahaei","year":"2020","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"3203","DOI":"10.1109\/JSYST.2017.2690259","article-title":"Scalable Architecture for SDN Traffic Classification","volume":"12","author":"Hayes","year":"2018","journal-title":"IEEE Syst. J."},{"key":"ref_16","first-page":"2034","article-title":"Deep Learning Based Traffic Classification In Software Defined Networking\u2014A Survey","volume":"9","author":"Selvi","year":"2020","journal-title":"Int. J. Sci. Technol. Res."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"166011","DOI":"10.1109\/ACCESS.2019.2953565","article-title":"FWFS: Selecting Robust Features Towards Reliable and Stable Traffic Classifier in SDN","volume":"7","author":"Chin","year":"2019","journal-title":"IEEE Access"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"55380","DOI":"10.1109\/ACCESS.2018.2872430","article-title":"Datanet: Deep Learning Based Encrypted Network Traffic Classification in SDN Home Gateway","volume":"6","author":"Wang","year":"2018","journal-title":"IEEE Access"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"e3302","DOI":"10.1002\/ett.3302","article-title":"Deep learning\u2013based network application classification for SDN","volume":"29","author":"Zhang","year":"2018","journal-title":"Trans. Emerg. Telecommun. Technol."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Lim, H.K., Kim, J.B., Kim, K., Hong, Y.G., and Han, Y.H. (2019). Payload-Based Traffic Classification Using Multi-Layer LSTM in Software Defined Networks. Appl. Sci., 9.","DOI":"10.3390\/app9122550"},{"key":"ref_21","first-page":"216","article-title":"Application-Based Online Traffic Classification with Deep Learning Models on SDN Networks","volume":"5","author":"Chang","year":"2020","journal-title":"Adv. Technol. Innov."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"206","DOI":"10.18201\/ijisae.2020466314","article-title":"A Deep Learning Based System for Traffic Engineering in Software Defined Networks","volume":"8","author":"Abdulazzaq","year":"2020","journal-title":"Int. J. Intell. Syst. Appl. Eng."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"218081","DOI":"10.1109\/ACCESS.2020.3041806","article-title":"CAPC: Packet-Based Network Service Classifier With Convolutional Autoencoder","volume":"8","author":"Chiu","year":"2020","journal-title":"IEEE Access"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"108535","DOI":"10.1016\/j.comnet.2021.108535","article-title":"ByteSGAN: A semi-supervised Generative Adversarial Network for encrypted traffic classification in SDN Edge Gateway","volume":"200","author":"Wang","year":"2021","journal-title":"Comput. Netw."},{"key":"ref_25","first-page":"2319","article-title":"Deep Learning-Based Encrypted Network Traffic Classification and Resource Allocation in SDN","volume":"20","author":"Wu","year":"2021","journal-title":"J. Web Eng."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"749","DOI":"10.1007\/s11277-021-08403-5","article-title":"Encrypted Network Traffic Classification and Resource Allocation with Deep Learning in Software Defined Network","volume":"127","author":"Setiawan","year":"2022","journal-title":"Wirel. Pers. Commun."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"4738","DOI":"10.1109\/ACCESS.2020.3048348","article-title":"Explaining Deep Learning-Based Traffic Classification Using a Genetic Algorithm","volume":"9","author":"Ahn","year":"2021","journal-title":"IEEE Access"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"105736","DOI":"10.1016\/j.engappai.2022.105736","article-title":"Traffic classification using distributions of latent space in software-defined networks: An experimental evaluation","volume":"119","author":"Jang","year":"2023","journal-title":"Eng. Appl. Artif. Intell."},{"key":"ref_29","unstructured":"Azevedo, A., and Santos, M. (2008, January 24\u201326). KDD, semma and CRISP-DM: A parallel overview. Proceedings of the IADIS European Conference on Data Mining, Amsterdam, The Netherlands."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"165263","DOI":"10.1109\/ACCESS.2020.3022633","article-title":"InSDN: A Novel SDN Intrusion Dataset","volume":"8","author":"Elsayed","year":"2020","journal-title":"IEEE Access"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Draper-Gil, G., Lashkari, A.H., Mamun, M.S.I., and Ghorbani, A. (2016, January 19\u201321). Characterization of Encrypted and VPN Traffic using Time-related Features. Proceedings of the 2nd International Conference on Information Systems Security and Privacy\u2014ICISSP, Rome, Italy.","DOI":"10.5220\/0005740704070414"},{"key":"ref_32","unstructured":"Lashkari, A.H., Gil, G.D., Mamun, M.S.I., and Ghorbani, A.A. (2017, January 19\u201321). Characterization of Tor Traffic using Time based Features. Proceedings of the 3rd International Conference on Information Systems Security and Privacy\u2014ICISSP, Porto, Portugal."},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Chuang, H.M., Liu, F., and Tsai, C.H. (2022). Early Detection of Abnormal Attacks in Software-Defined Networking Using Machine Learning Approaches. Symmetry, 14.","DOI":"10.3390\/sym14061178"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"2348","DOI":"10.1109\/TFUZZ.2019.2935688","article-title":"Incremental Missing-Data Imputation for Evolving Fuzzy Granular Prediction","volume":"28","author":"Garcia","year":"2020","journal-title":"IEEE Trans. Fuzzy Syst."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"107964","DOI":"10.1109\/ACCESS.2019.2932769","article-title":"Progress in Outlier Detection Techniques: A Survey","volume":"7","author":"Wang","year":"2019","journal-title":"IEEE Access"},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s40537-014-0007-7","article-title":"Deep learning applications and challenges in big data analytics","volume":"2","author":"Najafabadi","year":"2015","journal-title":"J. Big Data"},{"key":"ref_37","first-page":"201769","article-title":"A study of the effect of random projection and other dimensionality reduction techniques on different classification methods","volume":"18","author":"George","year":"2017","journal-title":"Baselius Res."},{"key":"ref_38","unstructured":"Nu\u00f1ez-Agurto, D., Fuertes, W., Marrone, L., Benavides-Astudillo, E., and V\u00e1squez Berm\u00fadez, M. (2023). Technologies and Innovation, 9th International Conference, CITI 2023, Guayaquil, Ecuador, 13\u201316 November 2023, Springer."},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"432","DOI":"10.1016\/j.asoc.2018.03.040","article-title":"Feature memory-based deep recurrent neural network for language modeling","volume":"68","author":"Deng","year":"2018","journal-title":"Appl. Soft Comput."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"5276","DOI":"10.1109\/ACCESS.2017.2787696","article-title":"Interactive Temporal Recurrent Convolution Network for Traffic Prediction in Data Centers","volume":"6","author":"Cao","year":"2018","journal-title":"IEEE Access"},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Li, H., He, E., Kuang, C., Yang, X., Wu, X., and Jia, Z. (2022, January 11\u201314). An Abnormal Traffic Detection Based on Attention-Guided Bidirectional GRU. Proceedings of the 2022 IEEE 22nd International Conference on Communication Technology (ICCT), Nanjing, China.","DOI":"10.1109\/ICCT56141.2022.10072487"},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"1735","DOI":"10.1162\/neco.1997.9.8.1735","article-title":"Long Short-Term Memory","volume":"9","author":"Hochreiter","year":"1997","journal-title":"Neural Comput."},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"66212","DOI":"10.1109\/ACCESS.2023.3290613","article-title":"A Hierarchical Intrusion Detection Model Combining Multiple Deep Learning Models With Attention Mechanism","volume":"11","author":"Xu","year":"2023","journal-title":"IEEE Access"},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"4436","DOI":"10.1109\/TIA.2020.2971952","article-title":"A Visualized Botnet Detection System Based Deep Learning for the Internet of Things Networks of Smart Cities","volume":"56","author":"Vinayakumar","year":"2020","journal-title":"IEEE Trans. Ind. Appl."}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/16\/5\/153\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T14:35:42Z","timestamp":1760106942000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/16\/5\/153"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,29]]},"references-count":44,"journal-issue":{"issue":"5","published-online":{"date-parts":[[2024,5]]}},"alternative-id":["fi16050153"],"URL":"https:\/\/doi.org\/10.3390\/fi16050153","relation":{},"ISSN":["1999-5903"],"issn-type":[{"value":"1999-5903","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,4,29]]}}}