HYBRID-CNN: An Efficient Scheme for Abnormal Flow Detection in the SDN-Based Smart Grid

Figure 1

The system model of the SDN-based Smart Grid; it mainly includes physical plane, southbound interface, control plane, northbound interface, and application plane. Devices in the physical layer initiate access request through the Internet, and the flow collection module of the SDN controller captures all request flow statistics table information to extract flow features. HYBRID-CNN is used to detect abnormal traffic and generate abnormal reports. Then, the generated anomaly report is sent to the SDN controller through the security channel. Finally, the SDN controller discards attack packets and updates the flow table according to the received report.