International Journal of Wireless and Microwave Technologies (IJWMT)
IJWMT Vol. 16, No. 4, 8 Aug. 2026
Cover page and Table of Contents: PDF (size: 1988KB)
RF-OCSA: A Hybrid Metaheuristic Feature Selection Framework for DDoS Attack Detection in Cloud Environments
PDF (1988KB), PP.111-136
Views: 0 Downloads: 0
Author(s)
Index Terms
DDoS, Cloud Computing, Random Forest, Oppositional Crow Search, NS3
Abstract
Distributed Denial of Service (DDoS) attacks have emerged as one of the most critical cybersecurity threats to cloud computing environments, significantly affecting service availability, resource utilization, and operational reliability. The dynamic nature of cloud traffic and the increasing sophistication of attack patterns make accurate and efficient DDoS detection a challenging task. To address this issue, this paper proposes a hybrid feature-selection and classification framework, namely Random Forest-based Oppositional Crow Search Algorithm (RF-OCSA), for intelligent DDoS attack detection in cloud environments. The proposed framework consists of data preprocessing, optimal feature selection using the Oppositional Crow Search Algorithm (OCSA), and attack classification using the Random Forest (RF) classifier. OCSA employs oppositional learning to enhance search diversity and identify the most discriminative features while reducing feature redundancy and computational overhead. The effectiveness of the proposed RF-OCSA model is evaluated using four benchmark datasets, namely CIC-DDoS2019, AISED, TestCloudIDS, and UNSW-NB15. Experimental analysis is conducted using Accuracy, Sensitivity, Specificity, Precision, and F-measure as evaluation metrics, while NS-3 is utilized to emulate representative cloud-network traffic scenarios. The results demonstrate that RF-OCSA consistently outperforms GHLBO, CNN-LSTM, and DeepDefend by achieving superior detection performance across all datasets, with classification metrics exceeding 98% in most cases. The integration of oppositional feature optimization and ensemble learning significantly improves attack detection capability, reduces false alarms, and enhances model robustness. These findings indicate that RF-OCSA is an effective and scalable framework for securing cloud infrastructures against evolving DDoS attacks.
Cite This Paper
Srikanth Indurthi, Ganesh Reddy Karri, "RF-OCSA: A Hybrid Metaheuristic Feature Selection Framework for DDoS Attack Detection in Cloud Environments", International Journal of Wireless and Microwave Technologies(IJWMT), Vol.16, No.4, pp. 111-136, 2026. DOI:10.5815/ijwmt.2026.04.08
Reference
[1]Dong, Shi, Khushnood Abbas, and Raj Jain. "A survey on distributed denial of service (DDoS) attacks in SDN and cloud computing environments." IEEE Access 7 (2019): 80813-80828. https://doi.org/10.1109/ACCESS.2019.2922196
[2]Habib, AKM Ahasan, et al. "Distributed denial-of-service attack detection short review: issues, challenges, and recommendations." Bulletin of Electrical Engineering and Informatics 14.1 (2025): 438-446. https://doi.org/10.11591/eei.v14i1.8377
[3]Kaur, Amandeep, C. Rama Krishna, and Nilesh Vishwasrao Patil. "A comprehensive review on Software-Defined Networking (SDN) and DDoS attacks: Ecosystem, taxonomy, traffic engineering, challenges and research directions." Computer Science Review 55 (2025): 100692. https://doi.org/10.1016/j.cosrev.2024.100692
[4]Ali, Mohammed Hasan, et al. "Threat analysis and distributed denial of service (DDoS) attack recognition in the internet of things (IoT)." Electronics 11.3 (2022): 494. https://doi.org/10.3390/electronics11030494
[5]Abiramasundari, S., and V. Ramaswamy. "Distributed denial-of-service (DDOS) attack detection using supervised machine learning algorithms." Scientific Reports 15.1 (2025): 13098. https://doi.org/10.1038/s41598-024-84879-y
[6]Gadallah, Waheed G., Nagwa M. Omar, and Hosni M. Ibrahim. "Machine Learning-based Distributed Denial of Service Attacks Detection Technique using New Features in Software-defined Networks." International Journal of Computer Network & Information Security 13.3 (2021). https://doi.org/10.5815/ijcnis.2021.03.02
[7]Ali, A. S. H. M. "Detection and Prevention of Distributed Denial of Service (DDoS) Attacks using Metaheuristic and Machine Learning Techniques." Int. J. Sci. Res. 13 (2024): 10. https://dx.doi.org/10.21275/SR241107015558
[8]Tobing, Elsa Kristi Aprilia, Rara Eka Septya, and Yustian Servanda. "Comparative Analysis of Network Security: Firewall, IDS, and AI-Based Defense Against DDoS Attacks." Journal of Artificial Intelligence and Engineering Applications (JAIEA) 4.3 (2025): 1818-1822. https://doi.org/10.59934/jaiea.v4i3.1026
[9]Aliar, Ahamed Ali Samsu, V. Gowri, and A. Arockia Abins. "Detection of distributed denial of service attack using enhanced adaptive deep dilated ensemble with hybrid meta‐heuristic approach." Transactions on Emerging Telecommunications Technologies 35.1 (2024): e4921. https://doi.org/10.1002/ett.4921
[10]Al-Matarneh, Feras Mohammed. "Integrating hybrid bald eagle crow search algorithm and deep learning for enhanced malicious node detection in secure distributed systems." Scientific Reports 15.1 (2025): 12647. https://doi.org/10.1038/s41598-025-93549-6
[11]Sharafaldin, Iman, Arash Habibi Lashkari, Saqib Hakak, and Ali A. Ghorbani. CIC-DDoS2019 Dataset. Canadian Institute for Cybersecurity, University of New Brunswick, 2019, https://www.unb.ca/cic/datasets/ddos-2019.html
[12]Syamsuddin, Irfan, Agung Indrawan, and Eddy Tungadi. AISED Dataset on Cloud DDoS Attacks. Zenodo, Version 1, 18 Jan. 2025. https://zenodo.org/records/14681803
[13]Vashishtha, Lalit Kumar, and Kakali Chatterjee. "Strengthening cybersecurity: TestCloudIDS dataset and SparkShield algorithm for robust threat detection." Computers & Security 151 (2025): 104308. https://doi.org/10.1016/j.cose.2024.104308
[14]Moustafa, Nour, and Jill Slay. UNSW-NB15 Dataset. Australian Centre for Cyber Security, University of New South Wales, 2015, https://research.unsw.edu.au/projects/unsw-nb15-dataset
[15]Rizk-Allah, Rizk M., Aboul Ella Hassanien, and Adam Slowik. "Multi-objective orthogonal opposition-based crow search algorithm for large-scale multi-objective optimization." Neural computing and applications 32.17 (2020): 13715-13746. https://doi.org/10.1007/s00521-020-04779-w
[16]Hamed Alnaish, Zakaria A., and Zakariya Yahya Algamal. "Improving binary crow search algorithm for feature selection." Journal of Intelligent Systems 32.1 (2023): 20220228. https://doi.org/10.1515/jisys-2022-0228
[17]Xu, Wei, Ruifeng Zhang, and Lei Chen. "An improved crow search algorithm based on oppositional forgetting learning." Applied Intelligence 52.7 (2022): 7905-7921. https://doi.org/10.1007/s10489-021-02701-y
[18]Hossain, Md Alamgir, and Md Saiful Islam. "Enhancing DDoS attack detection with hybrid feature selection and ensemble-based classifier: A promising solution for robust cybersecurity." Measurement: Sensors 32 (2024): 101037. https://doi.org/10.1016/j.measen.2024.101037
[19]Ramzan, Mahrukh, et al. "Distributed denial of service attack detection in network traffic using deep learning algorithm." Sensors 23.20 (2023): 8642. https://doi.org/10.3390/s23208642
[20]Akgun, Devrim, Selman Hizal, and Unal Cavusoglu. "A new DDoS attacks intrusion detection model based on deep learning for cybersecurity." Computers & Security 118 (2022): 102748. https://doi.org/10.1016/j.cose.2022.102748
[21]Wang, Yingqing, Guihe Qin, and Gaoxiang Lan. "An Online Adaptive Anomaly Detection Framework for Fog Environments." IEEE Internet of Things Journal (2025). https://doi.org/10.1109/JIOT.2025.3637028
[22]Chen, Shao-Rui, Shiang-Jiun Chen, and Wen-Bin Hsieh. "Enhancing Machine Learning-Based DDoS Detection Through Hyperparameter Optimization." Electronics 14.16 (2025): 3319. https://doi.org/10.3390/electronics14163319
[23]Sawah, Mohamed S., et al. "Distributed denial of service (DDoS) classification based on random forest model with backward elimination algorithm and grid search algorithm." Scientific Reports 15.1 (2025): 19063. https://doi.org/10.1038/s41598-025-03868-x
[24]Dasari, Kishore Babu, and Nagaraju Devarakonda. "Detection of Different DDoS Attacks Using Machine Learning Classification Algorithms." Ingénierie des Systèmes d Inf. 26.5 (2021): 461-468. https://doi.org/10.18280/isi.260505
[25]Mittal, Meenakshi, Krishan Kumar, and Sunny Behal. "DDoS-AT-2022: a distributed denial of service attack dataset for evaluating DDoS defense system." Proceedings of the Indian National Science Academy 89.2 (2023): 306-324. https://doi.org/10.1007/s43538-023-00159-9
[26]Balasubramaniam, S., et al. "Optimization enabled deep learning‐based ddos attack detection in cloud computing." International Journal of Intelligent Systems 2023.1 (2023): 2039217. https://doi.org/10.1155/2023/2039217
[27]Sanjalawe, Yousef, and Turke Althobaiti. "DDoS Attack Detection in Cloud Computing Based on Ensemble Feature Selection and Deep Learning." Computers, Materials & Continua 75.2 (2023). https://doi.org/10.32604/cmc.2023.037386
[28]Ouhssini, Mohamed, et al. "DeepDefend: A comprehensive framework for DDoS attack detection and prevention in cloud computing." Journal of King Saud University-Computer and Information Sciences 36.2 (2024): 101938. https://doi.org/10.1016/j.jksuci.2024.101938