p-Index From 2021 - 2026
0.408
P-Index
This Author published in this journals
All Journal Sinergi
Claim Missing Document
Check
Articles

Found 2 Documents
Search

Support Vector Machine (SVM) based Detection for Volumetric Bandwidth Distributed Denial of Service (DVB-DDOS) attack within gigabit Passive Optical Network Bibi, Sumayya; Zulkifli, Nadiatulhuda; Safdar, Ghazanfar Ali; Iqbal, Sajid
SINERGI Vol 29, No 1 (2025)
Publisher : Universitas Mercu Buana

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.22441/sinergi.2025.1.017

Abstract

The dynamic bandwidth allocation (DBA) algorithm is highly impactful in improving the network performance of gigabit passive optical networks (GPON). Network security is an important component of today’s networks to combat security attacks, including GPON. However, the literature contains reports highlighting its vulnerability to specific attacks, thereby raising concerns. In this work, we argue that the impact of a volumetric bandwidth distributed denial of service (DVB-DDOS) attack can be mitigated by improving the dynamic bandwidth assignment (DBA) scheme, which is used in PON to manage the US bandwidth at the optical line terminal (OLT). Thus, this study uses a support vector machine (SVM), a machine learning approach, to learn the optical network unit (ONU) traffic demand patterns and presents a hybrid security-aware DBA (HSA-DBA) scheme that is capable of distinguishing malicious ONUs from normal ONUs. In this article, we consider the deployment of the HSA-DBA scheme in OMNET++ to acquire the monitoring data samples used to train the ML technique for the effective classification of ONUs. The simulation findings revealed a mean upstream delay improvement of up to 63% due to the security feature offered by the mechanism. Besides, significant reductions for the upstream delay performance recorded at 63% TCONT2, 65% TCONT3, and 95% TCONT4 and for frame loss rate reduction for normal ONU traffic, respectively, were observed in comparison to the non-secure DBA mechanism. This research provides a significant stride towards secure GPONs, ensuring reliable defense mechanisms are in place, which paves the way for more resilient future broadband network infrastructures.
An intelligent approach for detection and classification of security attacks in a Passive Optical Network using Light Gradient Boosting Machine Bibi, Sumayya; Zulkifli, Nadiatulhuda; Iqbal, Farabi; Iqbal, Sajid; Ramli, Arnidza; Yoon Khang, Adam Wong
SINERGI Vol 29, No 3 (2025)
Publisher : Universitas Mercu Buana

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.22441/sinergi.2025.3.005

Abstract

Over the past decade, Passive Optical Networks (PONs) have emerged as a leading solution for next-generation broadband access, providing high-speed and cost-effective communication. However, PONs face significant security challenges, including data interception, denial-of-service (DoS) attacks, and resource exhaustion caused by malicious Optical Network Units (ONUs). Machine learning (ML), particularly advanced models like Light Gradient Boosting Machine (LightGBM), has proven to be a promising solution for managing complex security issues in PONs. Leveraging its ability to handle imbalanced, high-dimensional datasets, LightGBM was employed in this study to detect and classify malicious ONUs based on bandwidth usage patterns. The model achieved an impressive accuracy of 95.27%, a Matthews Correlation Coefficient (MCC) of 90%, and a precision rate of 93%. While traditional classifiers, such as Naïve Bayes (NB), achieved an accuracy of 88.53%, LightGBM demonstrated superior robustness in addressing class imbalance and enhancing detection accuracy. This work highlights the potential of LightGBM in enhancing PON security and enabling intelligent, resilient broadband networks.