{"id":"https://openalex.org/W7123735692","doi":"https://doi.org/10.1109/iscc65549.2025.11325794","title":"Zero-Day Botnet Attack Detection in IoV: A Modular Approach Using Isolation Forests and Particle Swarm Optimization","display_name":"Zero-Day Botnet Attack Detection in IoV: A Modular Approach Using Isolation Forests and Particle Swarm Optimization","publication_year":2025,"publication_date":"2025-07-02","ids":{"openalex":"https://openalex.org/W7123735692","doi":"https://doi.org/10.1109/iscc65549.2025.11325794"},"language":"en","primary_location":{"id":"doi:10.1109/iscc65549.2025.11325794","doi":"https://doi.org/10.1109/iscc65549.2025.11325794","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscc65549.2025.11325794","pdf_url":null,"source":{"id":"https://openalex.org/S4210175722","display_name":"IEEE Symposium on Computers and Communications (ISCC)","issn_l":"1530-1346","issn":["1530-1346","2642-7389"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Symposium on Computers and Communications (ISCC)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2504.18814","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008293013","display_name":"Abdelaziz Amara Korba","orcid":"https://orcid.org/0000-0001-7605-4660","observed_orcids":["https://orcid.org/0000-0001-7605-4660"]},"institutions":[{"id":"https://openalex.org/I78744979","display_name":"La Rochelle Universit\u00e9","ror":"https://ror.org/04mv1z119","country_code":"FR","type":"education","lineage":["https://openalex.org/I78744979"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Abdelaziz Amara Korba","raw_affiliation_strings":["L3I, University of La Rochelle,France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"L3I, University of La Rochelle,France","institution_ids":["https://openalex.org/I78744979"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084781467","display_name":"Nour El Islem Karabadji","orcid":"https://orcid.org/0000-0002-5307-7090","observed_orcids":["https://orcid.org/0000-0002-5307-7090"]},"institutions":[{"id":"https://openalex.org/I4405258926","display_name":"National Higher School of Technology and Engineering Annaba","ror":"https://ror.org/01e536d88","country_code":"DZ","type":"education","lineage":["https://openalex.org/I4405258926"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Nour Elislem Karabadji","raw_affiliation_strings":["National Higher School of Technology and Engineering, LTSE, E3360100,Annaba,Algeria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Higher School of Technology and Engineering, LTSE, E3360100,Annaba,Algeria","institution_ids":["https://openalex.org/I4405258926"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076759830","display_name":"Yacine M. Ghamri-Doudane","orcid":"https://orcid.org/0000-0002-7986-2476","observed_orcids":["https://orcid.org/0000-0002-7986-2476"]},"institutions":[{"id":"https://openalex.org/I78744979","display_name":"La Rochelle Universit\u00e9","ror":"https://ror.org/04mv1z119","country_code":"FR","type":"education","lineage":["https://openalex.org/I78744979"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Yacine Ghamri-Doudane","raw_affiliation_strings":["L3I, University of La Rochelle,France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"L3I, University of La Rochelle,France","institution_ids":["https://openalex.org/I78744979"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":10.6617,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.98586074,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/unknown-attack-detection","display_name":"unknown attack detection","score":0.9179999828338623},{"id":"https://openalex.org/keywords/botnet-attacks","display_name":"botnet attacks","score":0.8519999980926514},{"id":"https://openalex.org/keywords/internet-of-vehicles","display_name":"Internet of Vehicles","score":0.9869999885559082},{"id":"https://openalex.org/keywords/connected-and-autonomous-vehicles","display_name":"connected and autonomous vehicles","score":0.9570000171661377},{"id":"https://openalex.org/keywords/intrusion-detection-systems","display_name":"intrusion detection systems","score":0.9089999794960022},{"id":"https://openalex.org/keywords/mobile-edge-computing","display_name":"mobile edge computing","score":0.7749999761581421},{"id":"https://openalex.org/keywords/isolation-forest","display_name":"Isolation Forest","score":0.7480000257492065},{"id":"https://openalex.org/keywords/particle-swarm-optimization","display_name":"particle swarm optimization","score":0.9940000176429749},{"id":"https://openalex.org/keywords/stacking-ensemble","display_name":"stacking ensemble","score":0.6200000047683716},{"id":"https://openalex.org/keywords/vehicular-network-security","display_name":"VANET security","score":0.7960000038146973},{"id":"https://openalex.org/keywords/network-traffic-monitoring","display_name":"network traffic monitoring","score":0.6579999923706055}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.8593999743461609},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6794999837875366},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6541000008583069},{"id":"https://openalex.org/C85617194","wikidata":"https://www.wikidata.org/wiki/Q2072794","display_name":"Particle swarm optimization","level":2,"score":0.5778999924659729},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5670999884605408},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5066999793052673},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.4537000060081482},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.4526999890804291},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.44119998812675476},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.40220001339912415},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3856000006198883},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.3675999939441681},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.35510000586509705},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.34630000591278076},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.3382999897003174},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33730000257492065},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32330000400543213},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.322299987077713},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.321399986743927},{"id":"https://openalex.org/C181335050","wikidata":"https://www.wikidata.org/wiki/Q14915018","display_name":"Swarm behaviour","level":2,"score":0.31779998540878296},{"id":"https://openalex.org/C2775896111","wikidata":"https://www.wikidata.org/wiki/Q642560","display_name":"Router","level":2,"score":0.3167000114917755},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.31380000710487366},{"id":"https://openalex.org/C25516864","wikidata":"https://www.wikidata.org/wiki/Q1665949","display_name":"Interconnectivity","level":2,"score":0.3070000112056732},{"id":"https://openalex.org/C59519942","wikidata":"https://www.wikidata.org/wiki/Q650665","display_name":"Drone","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.29440000653266907},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.27570000290870667},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.27160000801086426},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.27079999446868896},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2669999897480011},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.26589998602867126},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2565999925136566}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/iscc65549.2025.11325794","doi":"https://doi.org/10.1109/iscc65549.2025.11325794","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscc65549.2025.11325794","pdf_url":null,"source":{"id":"https://openalex.org/S4210175722","display_name":"IEEE Symposium on Computers and Communications (ISCC)","issn_l":"1530-1346","issn":["1530-1346","2642-7389"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Symposium on Computers and Communications (ISCC)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2504.18814","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2504.18814","pdf_url":"https://arxiv.org/pdf/2504.18814","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2504.18814","doi":"https://doi.org/10.48550/arxiv.2504.18814","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2504.18814","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2504.18814","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2504.18814","pdf_url":"https://arxiv.org/pdf/2504.18814","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.8970999717712402}],"study_designs":[],"awards":[{"id":"https://openalex.org/G1363411322","display_name":null,"funder_award_id":"ANR-20-CE25-0015-16","funder_id":"https://openalex.org/F4320321038","funder_display_name":"Fonds National de la Recherche Luxembourg"},{"id":"https://openalex.org/G3375215353","display_name":"Intelligent orchestrated security and privacy-aware slicing for 5G and beyond vehicular networks","funder_award_id":"ANR-20-CE25-0015","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"},{"id":"https://openalex.org/G5296751580","display_name":null,"funder_award_id":"ANR-20","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"},{"id":"https://openalex.org/G5313214471","display_name":null,"funder_award_id":"14891397","funder_id":"https://openalex.org/F4320321038","funder_display_name":"Fonds National de la Recherche Luxembourg"}],"funders":[{"id":"https://openalex.org/F4320320883","display_name":"Agence Nationale de la Recherche","ror":"https://ror.org/00rbzpz17"},{"id":"https://openalex.org/F4320321038","display_name":"Fonds National de la Recherche Luxembourg","ror":"https://ror.org/039z13y21"},{"id":"https://openalex.org/F4320334322","display_name":"HORIZON EUROPE Framework Programme","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7123735692.pdf","grobid_xml":"https://content.openalex.org/works/W7123735692.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W2588675103","https://openalex.org/W3015875647","https://openalex.org/W3038409683","https://openalex.org/W3183554430","https://openalex.org/W3208464142","https://openalex.org/W3212619967","https://openalex.org/W4213166078","https://openalex.org/W4250024550","https://openalex.org/W4300827522","https://openalex.org/W4311779867","https://openalex.org/W4324134785","https://openalex.org/W4360838285","https://openalex.org/W4366417275","https://openalex.org/W4375952932","https://openalex.org/W4385486439","https://openalex.org/W4392152403","https://openalex.org/W4394711525","https://openalex.org/W4400727271","https://openalex.org/W4400727443","https://openalex.org/W4401508794","https://openalex.org/W4408324826","https://openalex.org/W4408565769"],"related_works":["https://openalex.org/W4403528916","https://openalex.org/W4320029347","https://openalex.org/W4410770889","https://openalex.org/W4206309573","https://openalex.org/W4379409137","https://openalex.org/W4394711525","https://openalex.org/W4410866089","https://openalex.org/W4412903372","https://openalex.org/W7121277553","https://openalex.org/W4408401077"],"abstract_inverted_index":{"The":[0,88,143],"Internet":[1],"of":[2,76,112,159,177],"Vehicles":[3,34],"(IoV)":[4],"is":[5,69],"transforming":[6],"transportation":[7],"by":[8,38,122],"enhancing":[9],"connectivity":[10],"and":[11,25,32,63,82,166,184,190],"enabling":[12],"autonomous":[13],"driving.":[14],"However,":[15],"this":[16],"increased":[17],"interconnectivity":[18],"introduces":[19],"new":[20],"security":[21],"vulnerabilities.":[22],"Bot":[23],"malware":[24],"cyberattacks":[26],"pose":[27],"significant":[28],"risks":[29],"to":[30,62,138],"Connected":[31],"Autonomous":[33],"(CAVs),":[35],"as":[36],"demonstrated":[37],"real-world":[39],"incidents":[40],"involving":[41],"remote":[42],"vehicle":[43],"system":[44],"compromise.":[45],"To":[46],"address":[47],"these":[48],"challenges,":[49],"we":[50],"propose":[51],"an":[52,155],"edge-based":[53],"Intrusion":[54],"Detection":[55],"System":[56],"(IDS)":[57],"that":[58],"monitors":[59],"network":[60],"traffic":[61],"from":[64],"CAVs.":[65],"Our":[66],"detection":[67,157],"model":[68],"based":[70,135],"on":[71,97,149],"a":[72,109,130,140,150,188],"meta-ensemble":[73],"classifier":[74],"capable":[75],"recognizing":[77],"known":[78,183],"(N":[79],"day)":[80],"attacks":[81,165],"detecting":[83,181],"previously":[84],"unseen":[85],"(zero-day)":[86],"attacks.":[87,171],"approach":[89],"involves":[90],"training":[91],"multiple":[92],"Isolation":[93],"Forest":[94],"(IF)":[95],"models":[96],"Multi-access":[98],"Edge":[99],"Computing":[100],"(MEC)":[101],"servers,":[102],"with":[103],"each":[104],"IF":[105],"specialized":[106],"in":[107,180],"identifying":[108],"specific":[110],"type":[111],"botnet":[113,152],"attack.":[114],"These":[115,172],"IFs,":[116],"either":[117],"trained":[118],"locally":[119],"or":[120],"shared":[121],"other":[123],"MEC":[124],"nodes,":[125],"are":[126],"then":[127],"aggregated":[128],"using":[129],"Particle":[131],"Swarm":[132],"Optimization":[133],"(PSO)":[134],"stacking":[136],"strategy":[137],"construct":[139],"robust":[141],"meta-classifier.":[142],"proposed":[144],"IDS":[145],"has":[146],"been":[147],"evaluated":[148],"vehicular":[151],"dataset,":[153],"achieving":[154],"average":[156],"rate":[158],"$92.80":[160],"\\%$":[161,168],"for":[162,169,194],"N":[163],"-day":[164],"$77.32":[167],"zero-day":[170],"results":[173],"highlight":[174],"the":[175,197],"effectiveness":[176],"our":[178],"solution":[179],"both":[182],"emerging":[185],"threats,":[186],"providing":[187],"scalable":[189],"adaptive":[191],"defense":[192],"mechanism":[193],"CAVs":[195],"within":[196],"IoV":[198],"ecosystem.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":9},{"year":2025,"cited_by_count":5}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2026-01-14T00:00:00"}