Artificial Intelligence Enabled Software Defined Networking: A Comprehensive Overview <s> Fuzzy Inference Systems in SDN <s> In terms of network security, software-defined networks (SDN) offer researchers unprecedented control over network infrastructure and define a single point of control over the data flows routing of all network infrastructure. OpenFlow protocol is an embodiment of the software-defined networking paradigm. OpenFlow network security applications can implement more complex logic processing flows than their permission or prohibition. Such applications can implement logic to provide complex quarantine procedures, or redirect malicious network flows for their special treatment. Security detection and intrusion prevention algorithms can be implemented as OpenFlow security applications, however, their implementation is often more concise and effective. In this paper we considered the algorithm of the information security management system based on soft computing, and implemented a prototype of the intrusion detection system (IDS) for software-defined network, which consisting of statistic collection and processing module and decision-making module. These modules were implemented in the form of application for the Beacon controller in Java. Evaluation of the system was carried out on one of the main problems of network security - identification of hosts engaged in malicious network scanning. For evaluation of the modules work we used mininet environment, which provides rapid prototyping for OpenFlow network. The proposed algorithm combined with the decision making based on fuzzy rules has shown better results than the security algorithms used separately. In addition the number of code lines decreased by 20-30%, as well as the opportunity to easily integrate the various external modules and libraries, thus greatly simplifies the implementation of the algorithms and decision-making system. <s> BIB001 </s> Artificial Intelligence Enabled Software Defined Networking: A Comprehensive Overview <s> Fuzzy Inference Systems in SDN <s> In this paper SDN-WISE, a Software Defined Networking (SDN) solution for WIreless SEnsor networks, is introduced. Differently from the existing SDN solutions for wireless sensor networks, SDN-WISE is stateful and pursues two objectives: (i) to reduce the amount of information exchanged between sensor nodes and the SDN network controller, and (ii) to make sensor nodes programmable as finite state machines so enabling them to run operations that cannot be supported by stateless solutions. A detailed description of SDN-WISE is provided in this paper. SDN-WISE offers APIs that allow software developers to implement the SDN Controller using the programming language they prefer. This represents a major advantage of SDN-WISE as compared to existing solutions because it increases flexibility and simplicity in network programming. A prototype of SDN-WISE has been implemented and is described in this paper. Such implementation contains the modules that allow a real SDN Controller to manage an OMNeT++ simulated network. Finally, the paper illustrates the results obtained through an experimental testbed which has been developed to evaluate the performance of SDN-WISE in several operating conditions. <s> BIB002 </s> Artificial Intelligence Enabled Software Defined Networking: A Comprehensive Overview <s> Fuzzy Inference Systems in SDN <s> Software Defined Network (SDN) is a new network technology which allows network providers to afford predefined Quality of Service (QoS) for video streaming applications. Network administrators can develop desired traffic engineering techniques over SDN and support Quality of Experience (QoE) and QoS for their customers. One of the most important issues in traffic engineering is to find favorable links for routing between source and destination. The fitness of each link in the network depends on the end users QoE and the applications they are used. In this paper to achieve optimal routes, the fitness of each link is determined by type-2 fuzzy sets. Then, an adaptive traffic engineering method is proposed to find the best routes between source cameras and monitoring center in a video surveillance system. The proposed method is based on Constraint Shortest Path (CSP) problem and calculates minimum cost path which satisfies delay constraint. Due to NP-completeness of the CSP problems, LARAC algorithm is used to solve it. To the best of our knowledge, this is the first proposed traffic engineering technique which is based on type-2 fuzzy set for video streaming applications over SDN. The contribution of the proposed method regarding to the related works, is to apply type-2 and type-1 fuzzy logic for calculating the costs of network links based on QoE for providing QoS in a video surveillance system. In addition, this paper models the provisioning of QoS in a real scenario and emulates them in a network emulator. Many comparisons carried out between the proposed method and other well-known methods to show the effectiveness of the proposed method in terms of packet loss, delay and PSNR. <s> BIB003 </s> Artificial Intelligence Enabled Software Defined Networking: A Comprehensive Overview <s> Fuzzy Inference Systems in SDN <s> Abstract The growing trend in pervasive systems forces traditional wireless sensor networks to deal with new challenges, such as dynamic application requirements and heterogeneous networks. One of the latest paradigms in this area is software defined wireless sensor network. According to the paradigm, the networks take care of managing topological information and forwarding decisions using a bipartite architecture in which a control plane decides the forwarding policies and the data plane (i.e. ordinary sensor nodes) executes them. Unfortunately, in highly dynamic networks, this approach generates an overhead of control packet exchange between the ordinary nodes and the control plane, that leads to additional energy consumptions. This paper proposes a fuzzy logic based solution, called Fuzzy Topology Discovery Protocol (FTDP), to improve the efficiency of software defined wireless sensor networks. This work is designed according to the Software Defined Networking solution for WIreless SEnsor networks (SDN-WISE), which is an open source solution for software defined wireless sensor networks. The proposed work is one of the first attempts to use fuzzy theory in software defined based wireless sensor networks. The simulation results show that our approach can increase the lifetime of the network by 45% and decreases the packet loss ratio by 50% compared to the basic SDN-WISE solution. <s> BIB004 </s> Artificial Intelligence Enabled Software Defined Networking: A Comprehensive Overview <s> Fuzzy Inference Systems in SDN <s> Nowadays, Software-Defined Networking (SDN) has become a promising network architecture in which network devices are controlled in a separate Control Plane (i.e., SDN controller). In a specific aspect, employing SDN in a network offers an attractive network security solution due to its flexibility in building and adding more new software security rules. From another perspective, attack prediction and mitigation, especially for Distributed Denial of Service (DDoS) attacks, are still challenges in SDN environments since a SDN control system works probably slower than a non-SDN one and the SDN controller can become a target of attacks. In this article, at first, we analyze a real traffic use case in order to derive DDoS indicators and thresholds. Secondly, we design an Openflow/SDN-based Attack Mitigation Architecture that is able to quickly mitigate DDoS attacks on the fly. The design solves the existing problems of the Openflow protocol, reducing the traffic volume traversing over the interface between the data plane (switch) and the control plane (SDN controller) and decreasing the buffer size at the Openflow switch. Applying our proposed Fuzzy Logic-based DDoS Mitigation algorithm that deploys multiple criteria for DDoS detection - FDDoM, the system demonstrates the ability to detect and filter 97% of attack flows and reach a False Positive Rate of 5% that are acceptable figures in real system management. The results also show that the network resource which is required to cope and maintain flow entries is 50% reduced during attack time. <s> BIB005 </s> Artificial Intelligence Enabled Software Defined Networking: A Comprehensive Overview <s> Fuzzy Inference Systems in SDN <s> Denial of service flood attacks are among the most common and powerful attacks which abuse the computational resources and the bandwidth of a network. In this paper, a heterogeneous defense method is proposed based on a combination of the Software Defined controller and fuzzy decision making. Numerical results show that the proposed method has a lower computational load and response time compared to the traditional methods centralized in the controller. <s> BIB006 </s> Artificial Intelligence Enabled Software Defined Networking: A Comprehensive Overview <s> Fuzzy Inference Systems in SDN <s> As networking technology evolves and new network services are being deployed, the network infrastructure is shifting towards a virtualized software-enabled architecture, namely, Software Defined Networking (SDN). However, a full deployment of SDN is challenging due to financial limitations and lack of expertise in the field. Consequently, a new form of hybrid network emerged as a result of the partial deployment of SDN. This paper considers the three types of networks, traditional, SDN and hybrid, and implements a fuzzy decision system that embodies network deployment best practices according to the advantages gained with each technology (legacy and SDN), and provides technology and financial recommendations that help operators decide on what type of network is best to deploy given their network and service requirements. <s> BIB007
Fuzzy inference systems were also widely used in SDN paradigm BIB004 BIB005 BIB006 BIB001 BIB007 BIB003 . The main research was focused on introducing new protocols BIB004 , intrusion detection BIB005 BIB006 BIB001 , selection the optimal network deployment schemes BIB007 and traffic engineering BIB003 . Abdolmaleki et al. BIB004 proposed a topology discovery protocol for software defined wireless sensor networks. Their proposed protocol showed better performance when compared with software defined networking solution for wireless sensor networks (SDN-WISE) BIB002 . Dang-Van and Truong-Thu BIB005 presented an approach for preventing DDoS attacks based on Sugeno's fuzzy inference method. They analysed a real network traffic to conclude DDoS indicators and thresholds. The input of the fuzzy module were the following two parameters: rate of packets having inter arrival times in range (0-0.2 ms] and rate of flows having only one packet per flow. The experimental results showed the ability to detect and filter 97% of attack flows. In addition, it achieved a reasonably low false positive rate (approximately 5%) and maintained a reduction of flow entries of 50% during attack time. Rezaei et al. BIB006 proposed a cooperative defence approach against DoS flood attacks based on fuzzy modelling. The model has two parameters, which are trust in service provider and service sensitivity. The proposed system achieved lower computational load and response time compared to SynCookie and service provider's firewall. Dotcenko et al. BIB001 proposed an information security management system based on Mamdani's fuzzy inference approach. Threat degree was determined by the fuzzy inference module, which mainly depends on threshold random walk with credit-based rate limiting (TRW-CB) and rate limiting algorithms. The proposed system was able to detect 95% of the attacks with 1.2% false positive rate. Abdallah et al. BIB007 studied the selection of network deployment schemes based on Mamdani's approach. Their model consists of 21 rules and has the following 5 input parameters: network size (NS), the network utilization (NUT), network updates (NUP), initial technology deployment (ITD), ease of management (EM). The output parameter is the network technology choice (NT). This model can help the operators, who provide different options of networks to deploy. Mohammadi and Javidan BIB003 proposed a traffic engineering method for SDN-based video surveillance systems using adaptive,type-2 fuzzy approach, which showed better results when compared with type-1 fuzzy approach, available bandwidth based traffic engineering approach and, OSPF routing protocol in terms of end to end delay, peak signal to noise ratio (PSNR) and packet loss ratio.