(Clive Asuai, Andrew Mayor, Peace Oguoguo Ezzeh, Houssem Hosni, Aghoghovia Agajere Joseph-Brown, Ighere Arhokefe Merit, Irene Debekeme)
- Volume: 2,
Issue: 1,
Sitasi : 0
Abstrak:
Distributed Denial of Service (DDoS) attacks remain a critical threat to network infrastructure, necessitating timely and precise detection techniques to mitigate their impact. This study presents a hybrid deep learning framework that integrates the Three Conditions for Feature Aggregation (3ConFA) framework with a one-dimensional Convolutional Neural Network (1D-CNN) for effective DDoS detection. Initially, salient features were selected using the 3ConFA approach, which combines multi-filter feature ranking—based on Chi-square, Information Gain, and Decision Tree Recursive Feature Elimination (DT-RFE) to extract robust and relevant features from raw network traffic data. The training samples were balanced using the Adaptive Synthetic Sampling Approach (ADASYN) to address the high-class imbalance typically present in DDoS datasets. The refined features were then passed through a 1D-CNN model designed to learn temporal and spatial attack behavior patterns. Feature fusion was applied by concatenating the aggregated statistical features and the deep features learned by the CNN, then re-selected the most informative features using Recursive Feature Elimination with Cross-Validation (RFECV). The final classification was performed using a Softmax output layer, and the model was evaluated using 5-fold cross-validation and a separate test set. Experimental results demonstrated an average training accuracy of 99.42%, an F1-score of 99.35%, and an AUC-ROC of 99.87%. On the test set, the model achieved a detection accuracy of 99.56%, a precision of 99.61%, and an F1-score of 99.50%, with an AUC-ROC of 0.9982. The proposed hybrid approach outperforms traditional models such as Random Forest, Decision Tree, XGBoost, and standalone CNN, validating the synergistic impact of integrating 3ConFA with deep temporal convolutional modeling for accurate and interpretable DDoS attack detection.