Transformer-driven security framework for SDN-IoT networks: integrating multi-headed self-attention with TB-SMOTE and attention-driven transfer learning
摘要
Software-Defined Networks offer scalable, high-speed data transmission for IoT and 5 G ecosystems but face cross-layer vulnerabilities due to dynamic infrastructure changes. Present intrusion detection system that utilizes deep learning struggles with imbalanced datasets, zero-day attack detection, and feature extraction inefficiencies in heterogeneous SDN-IoT environments. This study introduces a novel Transformer-based Multi-head Self-Attention Module (TMSAM) framework, integrating three key components: (i) to improve detection accuracy of Cross-Layer Feature Aggregation and reduce false positives in large-scale networks. (ii) To mitigate class imbalance and enhance the system’s generalization capacity using an integrated sampling technique called Tomek Borderline-Synthetic Minority Oversampling Technique (TB-SMOTE) for training samples, and (iii) Attention-Driven Transfer Learning (ATL) for swift model adaptation. Experiments on the InSDN and SDNFlow datasets show that TMSAM achieves 99.41% detection accuracy, with TB-SMOTE improving generalization by 0.3%, ATL reducing training time by 62% and quantization reduced the memory usage by