{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T20:18:55Z","timestamp":1784146735322,"version":"3.55.0"},"reference-count":37,"publisher":"MDPI AG","issue":"13","license":[{"start":{"date-parts":[[2024,7,4]],"date-time":"2024-07-04T00:00:00Z","timestamp":1720051200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62041211"],"award-info":[{"award-number":["62041211"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2022YFHH0070"],"award-info":[{"award-number":["2022YFHH0070"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["BR22-14-05"],"award-info":[{"award-number":["BR22-14-05"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["NMGIRT2313"],"award-info":[{"award-number":["NMGIRT2313"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["230806272235841"],"award-info":[{"award-number":["230806272235841"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2024MS06002"],"award-info":[{"award-number":["2024MS06002"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Inner Mongolia Autonomous Region Science and Technology Plan Project","award":["62041211"],"award-info":[{"award-number":["62041211"]}]},{"name":"Inner Mongolia Autonomous Region Science and Technology Plan Project","award":["2022YFHH0070"],"award-info":[{"award-number":["2022YFHH0070"]}]},{"name":"Inner Mongolia Autonomous Region Science and Technology Plan Project","award":["BR22-14-05"],"award-info":[{"award-number":["BR22-14-05"]}]},{"name":"Inner Mongolia Autonomous Region Science and Technology Plan Project","award":["NMGIRT2313"],"award-info":[{"award-number":["NMGIRT2313"]}]},{"name":"Inner Mongolia Autonomous Region Science and Technology Plan Project","award":["230806272235841"],"award-info":[{"award-number":["230806272235841"]}]},{"name":"Inner Mongolia Autonomous Region Science and Technology Plan Project","award":["2024MS06002"],"award-info":[{"award-number":["2024MS06002"]}]},{"name":"Inner Mongolia Autonomous Region Directly Affiliated Universities Basic Scientific Research Business Fund","award":["62041211"],"award-info":[{"award-number":["62041211"]}]},{"name":"Inner Mongolia Autonomous Region Directly Affiliated Universities Basic Scientific Research Business Fund","award":["2022YFHH0070"],"award-info":[{"award-number":["2022YFHH0070"]}]},{"name":"Inner Mongolia Autonomous Region Directly Affiliated Universities Basic Scientific Research Business Fund","award":["BR22-14-05"],"award-info":[{"award-number":["BR22-14-05"]}]},{"name":"Inner Mongolia Autonomous Region Directly Affiliated Universities Basic Scientific Research Business Fund","award":["NMGIRT2313"],"award-info":[{"award-number":["NMGIRT2313"]}]},{"name":"Inner Mongolia Autonomous Region Directly Affiliated Universities Basic Scientific Research Business Fund","award":["230806272235841"],"award-info":[{"award-number":["230806272235841"]}]},{"name":"Inner Mongolia Autonomous Region Directly Affiliated Universities Basic Scientific Research Business Fund","award":["2024MS06002"],"award-info":[{"award-number":["2024MS06002"]}]},{"name":"Inner Mongolia Autonomous Region Higher Education Institutions Innovation Research Team","award":["62041211"],"award-info":[{"award-number":["62041211"]}]},{"name":"Inner Mongolia Autonomous Region Higher Education Institutions Innovation Research Team","award":["2022YFHH0070"],"award-info":[{"award-number":["2022YFHH0070"]}]},{"name":"Inner Mongolia Autonomous Region Higher Education Institutions Innovation Research Team","award":["BR22-14-05"],"award-info":[{"award-number":["BR22-14-05"]}]},{"name":"Inner Mongolia Autonomous Region Higher Education Institutions Innovation Research Team","award":["NMGIRT2313"],"award-info":[{"award-number":["NMGIRT2313"]}]},{"name":"Inner Mongolia Autonomous Region Higher Education Institutions Innovation Research Team","award":["230806272235841"],"award-info":[{"award-number":["230806272235841"]}]},{"name":"Inner Mongolia Autonomous Region Higher Education Institutions Innovation Research Team","award":["2024MS06002"],"award-info":[{"award-number":["2024MS06002"]}]},{"name":"China Ministry of Education industry-university cooperative education project","award":["62041211"],"award-info":[{"award-number":["62041211"]}]},{"name":"China Ministry of Education industry-university cooperative education project","award":["2022YFHH0070"],"award-info":[{"award-number":["2022YFHH0070"]}]},{"name":"China Ministry of Education industry-university cooperative education project","award":["BR22-14-05"],"award-info":[{"award-number":["BR22-14-05"]}]},{"name":"China Ministry of Education industry-university cooperative education project","award":["NMGIRT2313"],"award-info":[{"award-number":["NMGIRT2313"]}]},{"name":"China Ministry of Education industry-university cooperative education project","award":["230806272235841"],"award-info":[{"award-number":["230806272235841"]}]},{"name":"China Ministry of Education industry-university cooperative education project","award":["2024MS06002"],"award-info":[{"award-number":["2024MS06002"]}]},{"name":"Natural Science Foundation project of Inner Mongolia Autonomous Region","award":["62041211"],"award-info":[{"award-number":["62041211"]}]},{"name":"Natural Science Foundation project of Inner Mongolia Autonomous Region","award":["2022YFHH0070"],"award-info":[{"award-number":["2022YFHH0070"]}]},{"name":"Natural Science Foundation project of Inner Mongolia Autonomous Region","award":["BR22-14-05"],"award-info":[{"award-number":["BR22-14-05"]}]},{"name":"Natural Science Foundation project of Inner Mongolia Autonomous Region","award":["NMGIRT2313"],"award-info":[{"award-number":["NMGIRT2313"]}]},{"name":"Natural Science Foundation project of Inner Mongolia Autonomous Region","award":["230806272235841"],"award-info":[{"award-number":["230806272235841"]}]},{"name":"Natural Science Foundation project of Inner Mongolia Autonomous Region","award":["2024MS06002"],"award-info":[{"award-number":["2024MS06002"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>As 5G technology becomes more widespread, the significant improvement in network speed and connection density has introduced more challenges to network security. In particular, distributed denial of service (DDoS) attacks have become more frequent and complex in software-defined network (SDN) environments. The complexity and diversity of 5G networks result in a great deal of unnecessary features, which may introduce noise into the detection process of an intrusion detection system (IDS) and reduce the generalization ability of the model. This paper aims to improve the performance of the IDS in 5G networks, especially in terms of detection speed and accuracy. It proposes an innovative feature selection (FS) method to filter out the most representative and distinguishing features from network traffic data to improve the robustness and detection efficiency of the IDS. To confirm the suggested method\u2019s efficacy, this paper uses four common machine learning (ML) models to evaluate the InSDN, CICIDS2017, and CICIDS2018 datasets and conducts real-time DDoS attack detection on the simulation platform. According to experimental results, the suggested FS technique may match 5G network requirements for high speed and high reliability of the IDS while also drastically cutting down on detection time and preserving or improving DDoS detection accuracy.<\/jats:p>","DOI":"10.3390\/s24134344","type":"journal-article","created":{"date-parts":[[2024,7,4]],"date-time":"2024-07-04T06:28:54Z","timestamp":1720074534000},"page":"4344","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":30,"title":["Traffic Feature Selection and Distributed Denial of Service Attack Detection in Software-Defined Networks Based on Machine Learning"],"prefix":"10.3390","volume":"24","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-0981-1607","authenticated-orcid":false,"given":"Daoqi","family":"Han","sequence":"first","affiliation":[{"name":"College of Computer and Information Engineering, Inner Mongolia Agricultural University, Hohhot 010018, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-3436-7150","authenticated-orcid":false,"given":"Honghui","family":"Li","sequence":"additional","affiliation":[{"name":"College of Computer and Information Engineering, Inner Mongolia Agricultural University, Hohhot 010018, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xueliang","family":"Fu","sequence":"additional","affiliation":[{"name":"College of Computer and Information Engineering, Inner Mongolia Agricultural University, Hohhot 010018, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-9318-6644","authenticated-orcid":false,"given":"Shuncheng","family":"Zhou","sequence":"additional","affiliation":[{"name":"College of Computer and Information Engineering, Inner Mongolia Agricultural University, Hohhot 010018, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2024,7,4]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"146810","DOI":"10.1109\/ACCESS.2021.3123791","article-title":"AE-MLP: A Hybrid Deep Learning Approach for DDoS Detection and Classification","volume":"9","author":"Wei","year":"2021","journal-title":"IEEE Access"},{"key":"ref_2","unstructured":"(2023, September 25). NETSCOUT Threat Intelligence Report. Available online: https:\/\/baijiahao.baidu.com\/s?id=1778006329127766033&wfr=spider&for=pc."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"14","DOI":"10.1109\/JPROC.2014.2371999","article-title":"Software-Defined Networking: A Comprehensive Survey","volume":"103","author":"Kreutz","year":"2015","journal-title":"Proc. IEEE"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"102595","DOI":"10.1016\/j.jnca.2020.102595","article-title":"Security in SDN: A comprehensive survey","volume":"159","author":"Imbachi","year":"2020","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"82477","DOI":"10.1109\/ACCESS.2023.3301994","article-title":"DeMi: A Solution to Detect and Mitigate DoS Attacks in SDN","volume":"11","author":"Eliyan","year":"2023","journal-title":"IEEE Access"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Saha, S., Priyoti, A.T., Sharma, A., and Haque, A. (2022). Towards an Optimized Ensemble Feature Selection for DDoS Detection Using Both Supervised and Unsupervised Method. Sensors, 22.","DOI":"10.3390\/s22239144"},{"key":"ref_7","first-page":"94","article-title":"Feature Selection: A Data Perspective","volume":"50","author":"Li","year":"2017","journal-title":"ACM Comput. Surv."},{"key":"ref_8","first-page":"538","article-title":"A Review on Feature Selection and Ensemble Techniques for Intrusion Detection System","volume":"12","author":"Torabi","year":"2021","journal-title":"Int. J. Adv. Comput. Sci. Appl"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Alghazzawi, D., Bamasag, O., Ullah, H., and Asghar, M.Z. (2021). Efficient Detection of DDoS Attacks Using a Hybrid Deep Learning Model with Improved Feature Selection. Appl. Sci., 11.","DOI":"10.3390\/app112411634"},{"key":"ref_10","first-page":"2623","article-title":"An efficient DDoS attack detection mechanism in SDN environment","volume":"15","author":"Hnamte","year":"2023","journal-title":"Int. J. Inform. Technol."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Pelletier, C., Webb, G.I., and Petitjean, F. (August, January 28). Deep Learning for the Classification of Sentinel-2 Image Time Series. Proceedings of the IGARSS 2019\u20132019 IEEE International Geoscience and Remote Sensing Symposium, Yokohama, Japan.","DOI":"10.1109\/IGARSS.2019.8900123"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Lei, L., Kou, L., Zhan, X., Zhang, J., and Ren, Y. (2022). An Anomaly Detection Algorithm Based on Ensemble Learning for 5G Environment. Sensors, 22.","DOI":"10.3390\/s22197436"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1049\/iet-net.2017.0212","article-title":"Machine learning-based IDS for software-defined 5G network","volume":"7","author":"Li","year":"2018","journal-title":"IET Networks"},{"key":"ref_14","first-page":"975","article-title":"Machine Learning for Securing SDN based 5G Network","volume":"174","author":"Alamri","year":"2021","journal-title":"Int. J. Comput. Appl."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Li, M., Zhou, H., and Qin, Y. (2022). Two-Stage Intelligent Model for Detecting Malicious DDoS Behavior. Sensors, 22.","DOI":"10.3390\/s22072532"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Kim, Y.-E., Kim, Y.-S., and Kim, H. (2022). Effective Feature Selection Methods to Detect IoT DDoS Attack in 5G Core Network. Sensors, 22.","DOI":"10.3390\/s22103819"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"1862","DOI":"10.1109\/TCCN.2022.3186331","article-title":"A Flow-Based Anomaly Detection Approach With Feature Selection Method Against DDoS Attacks in SDNs","volume":"8","author":"Sayed","year":"2022","journal-title":"IEEE Trans. Cogn. Commun. Netw."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"111018","DOI":"10.1016\/j.asoc.2023.111018","article-title":"A feature selection method based on multiple feature subsets extraction and result fusion for improving classification performance","volume":"150","author":"Liu","year":"2024","journal-title":"Appl. Soft Comput."},{"key":"ref_19","first-page":"103445","article-title":"A dynamic feature selection technique to detect DDoS attack","volume":"74","author":"Chanu","year":"2023","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"67","DOI":"10.1016\/j.future.2022.02.006","article-title":"A feature selection-based method for DDoS attack flow classification","volume":"132","author":"Zhou","year":"2022","journal-title":"Future Gener. Comp. Sys."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Das, S., Venugopal, D., Shiva, S., and Sheldon, F.T. (2020, January 1\u20133). Empirical Evaluation of the Ensemble Framework for Feature Selection in DDoS Attack. Proceedings of the 2020 7th IEEE International Conference on Cyber Security and Cloud Computing (CSCloud)\/2020 6th IEEE International Conference on Edge Computing and Scalable Cloud (EdgeCom), New York, NY, USA.","DOI":"10.1109\/CSCloud-EdgeCom49738.2020.00019"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"353","DOI":"10.1016\/j.inffus.2022.09.026","article-title":"Fusion of statistical importance for feature selection in Deep Neural Network-based Intrusion Detection System","volume":"90","author":"Thakkar","year":"2023","journal-title":"Inform. Fusion"},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"34141","DOI":"10.1109\/ACCESS.2024.3370435","article-title":"Improved Feature Selection and Stream Traffic Classification Based on Machine Learning in Software-Defined Networks","volume":"12","author":"Eldhai","year":"2024","journal-title":"IEEE Access"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"20973","DOI":"10.1109\/ACCESS.2024.3362794","article-title":"Weighted Feature Selection for Machine Learning Based Accurate Intrusion Detection in Communication Networks","volume":"12","author":"Tripathi","year":"2024","journal-title":"IEEE Access"},{"key":"ref_25","first-page":"200381","article-title":"Cluster-based wireless sensor network framework for denial-of-service attack detection based on variable selection ensemble machine learning algorithms","volume":"22","author":"John","year":"2024","journal-title":"Intell. Syst. Appl."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"453","DOI":"10.1007\/s10462-021-10037-9","article-title":"A survey on intrusion detection system: Feature selection, model, performance measures, application perspective, challenges, and future research directions","volume":"55","author":"Thakkar","year":"2022","journal-title":"Artif. Intell. Rev."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"165263","DOI":"10.1109\/ACCESS.2020.3022633","article-title":"InSDN: A novel SDN intrusion dataset","volume":"8","author":"Elsayed","year":"2020","journal-title":"IEEE Access"},{"key":"ref_28","first-page":"108","article-title":"Toward generating a new intrusion detection dataset and intrusion traffic characterization","volume":"1","author":"Sharafaldin","year":"2018","journal-title":"ICISSp"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"215","DOI":"10.1016\/j.comcom.2019.09.014","article-title":"VARMAN: Multi-plane security framework for software defined networks","volume":"148","author":"Krishnan","year":"2019","journal-title":"Comput. Commun."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"2528","DOI":"10.1109\/TIFS.2019.2904844","article-title":"Assessment of the Effectiveness of Seven Biometric Feature Normalization Techniques","volume":"14","author":"Friedman","year":"2019","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Chen, T., and Guestrin, C. (2016, January 13\u201317). XGBoost: A Scalable Tree Boosting System. Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, San Francisco, CA, USA.","DOI":"10.1145\/2939672.2939785"},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1023\/A:1010933404324","article-title":"Random Forests","volume":"45","author":"Breiman","year":"2001","journal-title":"Mach. Learn."},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Alazab, A., Hobbs, M., Abawajy, J., and Alazab, M. (2012, January 2\u20135). Using feature selection for intrusion detection system. Proceedings of the 2012 International Symposium on Communications and Information Technologies (ISCIT), Gold Coast, Australia.","DOI":"10.1109\/ISCIT.2012.6380910"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Liu, Z., Wang, Y., Feng, F., Liu, Y., Li, Z., and Shan, Y. (2023). A DDoS Detection Method Based on Feature Engineering and Machine Learning in Software-Defined Networks. Sensors, 23.","DOI":"10.3390\/s23136176"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"1977","DOI":"10.1007\/s12652-021-03411-6","article-title":"Feature selection and comparison of classification algorithms for wireless sensor networks","volume":"14","author":"Pande","year":"2023","journal-title":"J. Amb. Intel. Hum. Comp."},{"key":"ref_36","first-page":"206","article-title":"Feature selection and comparison of classification algorithms for intrusion detection","volume":"19","year":"2018","journal-title":"Anadolu Univ. J. Sci. Technol. A-Appl. Sci. Eng."},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"330","DOI":"10.1016\/j.future.2023.07.039","article-title":"An optimized feature extraction algorithm for abnormal network traffic detection","volume":"149","author":"Chen","year":"2023","journal-title":"Future Gener. Comput. Syst."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/24\/13\/4344\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T15:10:06Z","timestamp":1760109006000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/24\/13\/4344"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7,4]]},"references-count":37,"journal-issue":{"issue":"13","published-online":{"date-parts":[[2024,7]]}},"alternative-id":["s24134344"],"URL":"https:\/\/doi.org\/10.3390\/s24134344","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,7,4]]}}}