9004 Problems of information security. Computer systems Проблемы информационной безопасности. Компьютерные системы 2071-8217 7 Detection of network attacks in software-defined networks using isolating forest algorithm Обнаружение сетевых атак в программно-конфигурируемых сетях с использованием алгоритма изолирующего леса Stepanov M. 0000-0003-1345-1874 Pavlenko Evgeny pavlenko_eyu@spbstu.ru 0000-0003-2849-4682 Lavrova Daria lavrova_ds@spbstu.ru Peter the Great St. Petersburg Polytechnic University 30 03 2021 1 62 78

This paper proposes an approach for detecting network attacks in software-defined networks. The specifics of such networks in terms of security are taken into account, and a modified isolating forest algorithm is taken as the basis for the developed approach. The results of experimental studies where the optimal parameters of the isolating forest algorithm and the extended algorithm of the isolating forest are chosen are presented. Based on the results of the studies, a conclusion is made about the effectiveness of the isolating forest for network attack detection in software-defined networks

 software-defined network network attacks isolation forest algorithm extended isolation forest algorithm networks attack detection