AI-driven intrusion detection and mitigation of flooding attacks in SDN-based 5G IoMT networks
摘要
The Internet of Medical Things (IoMT) enhances healthcare through real-time patient monitoring but is vulnerable to flooding attacks like SYN and UDP floods, which disrupt critical communications and threaten patient safety. This paper proposes an AI-driven mechanism to detect and mitigate such attacks in Software-Defined Networking (SDN)-based 5G IoMT networks. Machine learning models, trained on a comprehensive IoMT traffic dataset, identify malicious patterns in real-time. Upon detection, an Intrusion Detection System (IDS) alerts the SDN controller, which enforces mitigation policies at edge switches. Implemented in a realistic NS-3 and Mininet simulation environment with a Ryu SDN controller, our approach outperforms traditional methods by achieving high detection accuracy, reduced attack impact, and efficient resource utilization. Unlike prior studies relying on offline datasets, our simulation-based evaluation captures real-world network dynamics, ensuring practical applicability. This work demonstrates a scalable, efficient solution for securing IoMT ecosystems, with potential for broader attack mitigation in future healthcare networks.