Distributed denial of service (ddos) based artificial intelligence (ai) accelerated solution using a switch

A method comprising:

• extracting, by a switch coupled to a host device, a plurality of features from network traffic data received on a port interface of the switch, the network traffic data being directed to the host device from a second device;
• determining, using a machine learning (ML) detection system, whether the host device is subject to a distributed denial of service (DDOS) attack based on the plurality of features;
• and
• causing an action associated with an enforcement rule to be performed on subsequent network traffic data directed to the host device from the second device, responsive to a determination that the host device is subject to the DDOS attack.

A network device comprising:

• a network interface;
• a host interface;
• a processing device operatively coupled to the network interface and the host interface, wherein the processing device is to:
• extract a plurality of features from network traffic data received over the network interface and directed to a host device from a second device;
• determine, using a machine learning (ML) detection system, that the host device is subject to a distributed denial of service (DDOS) attack based on the plurality of features extracted from the network traffic data;
• and
• provide an alert of the DDOS attack to the host device in response to a determination that the host device is subject to the DDOS attack.