{"id":"https://openalex.org/W2774819086","doi":"https://doi.org/10.14257/ijsia.2017.11.11.01","title":"Machine Learning Based Botnet Detection in Software Defined Networks","display_name":"Machine Learning Based Botnet Detection in Software Defined Networks","publication_year":2017,"publication_date":"2017-11-30","ids":{"openalex":"https://openalex.org/W2774819086","doi":"https://doi.org/10.14257/ijsia.2017.11.11.01","mag":"2774819086"},"language":"en","primary_location":{"id":"doi:10.14257/ijsia.2017.11.11.01","doi":"https://doi.org/10.14257/ijsia.2017.11.11.01","is_oa":true,"landing_page_url":"https://doi.org/10.14257/ijsia.2017.11.11.01","pdf_url":"https://doi.org/10.14257/ijsia.2017.11.11.01","source":{"id":"https://openalex.org/S2764951172","display_name":"International Journal of Security and Its Applications","issn_l":"1738-9976","issn":["1738-9976","2092-1497","2207-9629"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-20"],"host_organization":"https://openalex.org/P4353079759","host_organization_name":"Science and Engineering Research Support Society","host_organization_lineage":["https://openalex.org/P4353079759"],"host_organization_lineage_names":["Science and Engineering Research Support Society"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Security and Its Applications","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://doi.org/10.14257/ijsia.2017.11.11.01","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133623635","display_name":"Farhan Tariq","orcid":"https://orcid.org/0009-0009-7926-6963","observed_orcids":["https://orcid.org/0009-0009-7926-6963"]},"institutions":[{"id":"https://openalex.org/I4405282637","display_name":"Sir Syed CASE Institute of Technology","ror":"https://ror.org/0066reb93","country_code":"PK","type":"education","lineage":["https://openalex.org/I4405282637"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Farhan Tariq","raw_affiliation_strings":["Electrical and computer engineering, Centre for Advanced Studies in Engineering, Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and computer engineering, Centre for Advanced Studies in Engineering, Islamabad, Pakistan","institution_ids":["https://openalex.org/I4405282637"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046741439","display_name":"Shamim Baig","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I29698356","display_name":"HITEC University","ror":"https://ror.org/013d87239","country_code":"PK","type":"education","lineage":["https://openalex.org/I29698356"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Shamim Baig","raw_affiliation_strings":["Computer Science and Engineering, HITEC University, Taxila, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science and Engineering, HITEC University, Taxila, Pakistan","institution_ids":["https://openalex.org/I29698356"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.0411,"has_fulltext":true,"cited_by_count":19,"citation_normalized_percentile":{"value":0.80384721,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":98},"biblio":{"volume":"11","issue":"11","first_page":"1","last_page":"12"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9785000085830688,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9785000085830688,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.014800000004470348,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0020000000949949026,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet-detection","display_name":"botnet detection","score":1.0},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"software-defined networking","score":0.9279999732971191},{"id":"https://openalex.org/keywords/network-flow-analysis","display_name":"network flow analysis","score":0.9290000200271606},{"id":"https://openalex.org/keywords/statistical-feature-extraction","display_name":"statistical feature extraction","score":0.5669999718666077},{"id":"https://openalex.org/keywords/sliding-window","display_name":"sliding window","score":0.5210000276565552},{"id":"https://openalex.org/keywords/decision-tree-classifier","display_name":"decision tree classification","score":0.8519999980926514},{"id":"https://openalex.org/keywords/network-security","display_name":"network security","score":0.38999998569488525}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.90948486328125},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6183040738105774},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5232733488082886},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37105005979537964},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3225749731063843},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1512030065059662},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11076614260673523},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.05987238883972168}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.14257/ijsia.2017.11.11.01","doi":"https://doi.org/10.14257/ijsia.2017.11.11.01","is_oa":true,"landing_page_url":"https://doi.org/10.14257/ijsia.2017.11.11.01","pdf_url":"https://doi.org/10.14257/ijsia.2017.11.11.01","source":{"id":"https://openalex.org/S2764951172","display_name":"International Journal of Security and Its Applications","issn_l":"1738-9976","issn":["1738-9976","2092-1497","2207-9629"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-20"],"host_organization":"https://openalex.org/P4353079759","host_organization_name":"Science and Engineering Research Support Society","host_organization_lineage":["https://openalex.org/P4353079759"],"host_organization_lineage_names":["Science and Engineering Research Support Society"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Security and Its Applications","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.14257/ijsia.2017.11.11.01","doi":"https://doi.org/10.14257/ijsia.2017.11.11.01","is_oa":true,"landing_page_url":"https://doi.org/10.14257/ijsia.2017.11.11.01","pdf_url":"https://doi.org/10.14257/ijsia.2017.11.11.01","source":{"id":"https://openalex.org/S2764951172","display_name":"International Journal of Security and Its Applications","issn_l":"1738-9976","issn":["1738-9976","2092-1497","2207-9629"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-20"],"host_organization":"https://openalex.org/P4353079759","host_organization_name":"Science and Engineering Research Support Society","host_organization_lineage":["https://openalex.org/P4353079759"],"host_organization_lineage_names":["Science and Engineering Research Support Society"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Security and Its Applications","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2774819086.pdf","grobid_xml":"https://content.openalex.org/works/W2774819086.grobid-xml"},"referenced_works_count":5,"referenced_works":["https://openalex.org/W2077488147","https://openalex.org/W2093331366","https://openalex.org/W2099452399","https://openalex.org/W2114996745","https://openalex.org/W2245787472"],"related_works":["https://openalex.org/W2805462980","https://openalex.org/W7117530878","https://openalex.org/W2976763034","https://openalex.org/W2073119119","https://openalex.org/W2911671887","https://openalex.org/W3208685039","https://openalex.org/W2254364023","https://openalex.org/W2897094640","https://openalex.org/W7202254585","https://openalex.org/W2780141921"],"abstract_inverted_index":{"This":[0],"paper":[1],"proposed":[2,22],"a":[3,39,67,76,134,137],"flow-based":[4],"approach":[5,123],"to":[6,14,37,43,54,82,132,148,177],"detect":[7,178],"botnet":[8,165],"by":[9],"applying":[10],"machine":[11,129],"learning":[12,130],"algorithms":[13],"software":[15],"defined":[16],"networks":[17],"without":[18],"reading":[19],"packet":[20],"payload.The":[21],"work":[23],"uses":[24],"network":[25,51],"flows":[26,72,98],"as":[27,75],"input":[28],"and":[29,80,95,106,119,166,190],"process":[30,50],"it":[31],"in":[32,99],"two":[33],"windows":[34],"based":[35,128],"modules":[36],"extract":[38,55],"statistical":[40],"feature":[41,112,142],"set":[42,113],"be":[44],"used":[45,147],"for":[46,86,103,157,187,192],"classification.The":[47],"first":[48],"module":[49,62,85,90],"flow":[52,56,68,150],"stream":[53],"traces.The":[57,168],"window":[58,102],"size":[59],"of":[60,78,109,185],"this":[61],"is":[63,73,114,145,159,175],"10":[64,71],"which":[65],"means":[66],"trace":[69,77,94,118],"with":[70],"considered":[74],"interest":[79],"forwarded":[81],"the":[83,92,104,110,153,173],"next":[84],"further":[87],"processing.The":[88],"second":[89],"processes":[91],"selected":[93,117],"fetches":[96],"historical":[97,121],"last":[100],"60-minute":[101],"source":[105],"destination":[107],"IPs":[108],"trace.The":[111],"extracted":[115,141,160],"from":[116,161],"relevant":[120],"flows.The":[122],"applies":[124],"supervised":[125],"decision":[126],"tree":[127],"algorithm":[131],"create":[133],"model":[135,144],"during":[136,152],"training":[138],"phase":[139],"using":[140],"set.This":[143],"then":[146],"classify":[149],"traces":[151],"testing":[154],"phase.The":[155],"dataset":[156],"experimentation":[158],"publicly":[162],"available":[163],"real":[164],"normal":[167],"experimental":[169],"findings":[170],"show":[171,182],"that":[172],"method":[174],"capable":[176],"unknown":[179,193],"botnet.The":[180],"results":[181],"detection":[183],"rate":[184],"97%":[186],"known":[188],"botnets":[189],"90%":[191],"botnets.":[194]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2017-12-22T00:00:00"}