{"id":"https://openalex.org/W7218330364","doi":null,"title":"Machine Learning\u2013Based IoT Botnet Detection: Techniques, Challenges, and Future Research Directions: A Comprehensive Review","display_name":"Machine Learning\u2013Based IoT Botnet Detection: Techniques, Challenges, and Future Research Directions: A Comprehensive Review","publication_year":2026,"publication_date":"2026-02-21","ids":{"openalex":"https://openalex.org/W7218330364"},"language":"en","primary_location":{"id":"pmh:oai:ojs2.ijrt.org:article/941","doi":null,"is_oa":true,"landing_page_url":"https://ijrt.org/j/article/view/941","pdf_url":"https://ijrt.org/j/article/download/941/871","source":{"id":"https://openalex.org/S5407051732","display_name":"International Journal of Research & Technology","issn_l":"2321-7510","issn":["2321-7510","2321-7529"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2321-7510","raw_type":"info:eu-repo/semantics/article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ijrt.org/j/article/download/941/871","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5155278214","display_name":"Dr. Gagan Sharma Cabdiraxmaan Cabdinuur Faarax","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Cabdiraxmaan Cabdinuur Faarax, Dr. Gagan Sharma","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5155278214"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.70754562,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13038","display_name":"Internet of Things and AI","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/iot-botnet-detection","display_name":"IoT botnet detection","score":0.9940000176429749},{"id":"https://openalex.org/keywords/iot-security","display_name":"Internet of Things security","score":0.9700000286102295},{"id":"https://openalex.org/keywords/machine-learning-based-intrusion-detection","display_name":"machine learning for intrusion detection","score":0.7250000238418579},{"id":"https://openalex.org/keywords/deep-learning","display_name":"deep learning","score":0.5860000252723694},{"id":"https://openalex.org/keywords/ensemble-methods","display_name":"ensemble methods","score":0.6169999837875366},{"id":"https://openalex.org/keywords/random-forest","display_name":"random forest","score":0.753000020980835},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"support vector machine","score":0.9010000228881836},{"id":"https://openalex.org/keywords/convolutional-neural-networks","display_name":"convolutional neural networks","score":0.8759999871253967},{"id":"https://openalex.org/keywords/recurrent-neural-networks","display_name":"recurrent neural networks","score":0.9850000143051147},{"id":"https://openalex.org/keywords/explainable-ai","display_name":"explainable AI","score":0.6930000185966492},{"id":"https://openalex.org/keywords/federated-learning","display_name":"federated learning","score":1.0},{"id":"https://openalex.org/keywords/cyber-threat-intelligence","display_name":"cyber threat intelligence","score":0.9990000128746033},{"id":"https://openalex.org/keywords/class-imbalance","display_name":"class imbalance","score":0.781000018119812},{"id":"https://openalex.org/keywords/zero-day-attacks","display_name":"zero-day attacks","score":0.7639999985694885},{"id":"https://openalex.org/keywords/lightweight-models","display_name":"lightweight models","score":0.8790000081062317},{"id":"https://openalex.org/keywords/real-time-detection","display_name":"real-time detection","score":0.9240000247955322},{"id":"https://openalex.org/keywords/ddos-attacks","display_name":"DDoS attacks","score":0.781000018119812},{"id":"https://openalex.org/keywords/resource-constrained-devices","display_name":"resource-constrained devices","score":0.7870000004768372}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.8154000043869019},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7357000112533569},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6643999814987183},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.6596999764442444},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6244000196456909},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6047000288963318},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3855000138282776},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.366100013256073},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.3652999997138977},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.36059999465942383},{"id":"https://openalex.org/C2779119184","wikidata":"https://www.wikidata.org/wiki/Q294350","display_name":"ALARM","level":2,"score":0.35429999232292175},{"id":"https://openalex.org/C59519942","wikidata":"https://www.wikidata.org/wiki/Q650665","display_name":"Drone","level":2,"score":0.3504999876022339},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.33550000190734863},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.3203999996185303},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.3041999936103821},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.30329999327659607},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.30309998989105225},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.2994000017642975},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.29750001430511475},{"id":"https://openalex.org/C2778464652","wikidata":"https://www.wikidata.org/wiki/Q309849","display_name":"Open research","level":2,"score":0.28360000252723694},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2720000147819519},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2655999958515167},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.26089999079704285},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.25769999623298645},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2529999911785126},{"id":"https://openalex.org/C3008058167","wikidata":"https://www.wikidata.org/wiki/Q84263196","display_name":"Coronavirus disease 2019 (COVID-19)","level":4,"score":0.250900000333786},{"id":"https://openalex.org/C62989814","wikidata":"https://www.wikidata.org/wiki/Q854648","display_name":"Gossip","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:ojs2.ijrt.org:article/941","doi":null,"is_oa":true,"landing_page_url":"https://ijrt.org/j/article/view/941","pdf_url":"https://ijrt.org/j/article/download/941/871","source":{"id":"https://openalex.org/S5407051732","display_name":"International Journal of Research & Technology","issn_l":"2321-7510","issn":["2321-7510","2321-7529"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2321-7510","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:ojs2.ijrt.org:article/941","doi":null,"is_oa":true,"landing_page_url":"https://ijrt.org/j/article/view/941","pdf_url":"https://ijrt.org/j/article/download/941/871","source":{"id":"https://openalex.org/S5407051732","display_name":"International Journal of Research & Technology","issn_l":"2321-7510","issn":["2321-7510","2321-7529"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2321-7510","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7218330364.pdf","grobid_xml":"https://content.openalex.org/works/W7218330364.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7216680516","https://openalex.org/W4388419817","https://openalex.org/W4410345476","https://openalex.org/W4399368194","https://openalex.org/W4411714763","https://openalex.org/W4406658150","https://openalex.org/W3092149785","https://openalex.org/W4405871581","https://openalex.org/W4404386488","https://openalex.org/W4408809538"],"abstract_inverted_index":{"The":[0,36,136],"rapid":[1],"proliferation":[2],"of":[3,6,15,47,79,96,100,103,127,151,161,190,221,228,239,253,271],"the":[4,12,80,98,149,157,203,222,235,251,269],"Internet":[5],"Things":[7],"(IoT)":[8],"devices":[9],"has":[10],"increased":[11],"attack":[13],"surface":[14],"current":[16],"networks,":[17],"thus":[18],"enabling":[19],"IoT":[20,48,105,162,212,245,273],"environments":[21],"to":[22,26,155,199],"be":[23],"more":[24,236],"penetrable":[25],"botnet-based":[27],"cyber-attacks":[28],"such":[29],"as":[30,64],"DDoS,":[31],"scanning,":[32],"malware":[33],"spread,":[34],"etc.":[35],"conventional":[37],"simple":[38],"security":[39],"measures":[40],"are":[41,122],"often":[42],"not":[43,208],"much":[44],"help":[45],"because":[46],"being":[49],"highly":[50,52],"diverse,":[51],"resource-constrained,":[53],"and":[54,59,88,108,119,133,148,159,202,225,243,262,265],"large":[55],"scaled.":[56],"Therefore,":[57],"ML":[58,82],"DL":[60],"have":[61,92],"been":[62,93],"touted":[63],"promising":[65],"mechanisms":[66,267],"for":[67,211],"facilitative-botnet":[68],"detection":[69,128,168,247,266],"in":[70,97,125],"IoT.":[71],"This":[72],"review":[73],"paper":[74,137,277],"informs":[75],"on":[76],"those":[77],"aspects":[78],"recent":[81],"methods":[83],"from":[84,173],"supervised,":[85],"unsupervised,":[86],"semi-supervised,":[87],"hybrid":[89],"models":[90],"that":[91,205],"made":[94],"use":[95],"exploration":[99],"novel":[101],"ways":[102],"doing":[104],"botnet":[106,246],"detections":[107],"analyses":[109],"where":[110],"forest":[111],"Random,":[112],"Support":[113],"Vector":[114],"Machine,":[115],"ensemble,":[116],"CNN,":[117],"RNN,":[118],"Planning":[120],"Systems":[121],"discussed":[123],"critically":[124],"terms":[126],"efficiency,":[129],"false":[130],"alarm":[131],"rate,":[132],"computational":[134,194],"complexity.":[135],"also":[138],"explores":[139],"new":[140],"paradigms":[141],"like":[142],"explainable":[143],"artificial":[144],"learning,":[145,147],"federated":[146],"integration":[150],"cyber":[152,274],"threat":[153],"intelligence":[154],"promote":[156],"addictiveness":[158],"resilience":[160],"systems.":[163],"Even":[164],"after":[165],"achieving":[166],"true":[167],"accuracies":[169],"greater":[170],"than":[171],"95%":[172],"research":[174,229,280],"exercises":[175],"using":[176],"benchmarked":[177],"datasets,":[178,261],"present":[179],"approaches":[180],"struggle":[181],"with":[182],"multiple":[183,260],"shortcomings,":[184],"which":[185],"include":[186],"class":[187],"imbalance,":[188],"lack":[189],"real-time":[191,256],"deployment,":[192],"high":[193],"cost,":[195],"nonexistent":[196],"generalization":[197,258],"capabilities":[198],"zero-day":[200],"threats,":[201],"fact":[204],"they":[206],"do":[207],"work":[209],"well":[210],"devices.":[213],"Through":[214],"an":[215],"extensive":[216],"comparative":[217],"analysis,":[218],"a":[219,226],"discussion":[220],"existing":[223],"vulnerabilities,":[224],"summary":[227],"gaps,":[230],"this":[231,276],"study":[232],"altogether":[233],"indicates":[234],"desirable":[237],"route":[238],"building":[240,270],"efficient,":[241],"scalable,":[242],"adaptive":[244],"frameworks.":[248],"While":[249],"stressing":[250],"design":[252],"lightweight":[254],"models,":[255],"detection,":[257],"across":[259],"coupled":[263],"prevention":[264],"toward":[268],"resilient":[272],"defenses,":[275],"discusses":[278],"future":[279],"directions.":[281]},"counts_by_year":[],"updated_date":"2026-10-30T12:39:25.321706","created_date":"2026-10-03T00:00:00"}