Controller Monitoring System In Software Defined Networks Using Random Forest Algorithm

Traditional networks use distributed control plane whereas Software Defined Networks (SDN) utilizes a centralized control plane. Due to this, monitoring the behavior of the control plane becomes necessary. The compromised control plane refers to the presence of one or more attacks internally in the controller. Due to this, controller functions abnormally. Aim of this paper is to propose an external monitoring system, which monitors the controller's behavior and results in the possibility of attacks in the controller. Some metrics are proposed to increase the accuracy of the detection process in the intrusion detection system. Random Forest algorithm has been used in the monitoring system.