Software Defined Networking (SDN) is a modern networking approach that separates the control plane from the data plane, allowing centralized control and better network management. However, the centralized SDN controller is highly vulnerable to Distributed Denial of Service (DDoS) attacks, where attackers send a large volume of malicious traffic to overload the controller and disrupt network services. Traditional DDoS detection methods are not effective in dynamic network environments because the