{"id":"https://openalex.org/W2947292277","doi":"https://doi.org/10.1109/access.2019.2919680","title":"Collaborative Framework for Early Detection of RAT-Bots Attacks","display_name":"Collaborative Framework for Early Detection of RAT-Bots Attacks","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2947292277","doi":"https://doi.org/10.1109/access.2019.2919680","mag":"2947292277"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2919680","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2919680","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08725491.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08725491.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034266447","display_name":"Ahmed A. Awad","orcid":null},"institutions":[{"id":"https://openalex.org/I84058292","display_name":"Helwan University","ror":"https://ror.org/00h55v928","country_code":"EG","type":"education","lineage":["https://openalex.org/I84058292"]}],"countries":["EG"],"is_corresponding":false,"raw_author_name":"Ahmed A. Awad","raw_affiliation_strings":["Department of Electronics, Communications, and Computer Engineering, Helwan University, Cairo, Egypt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electronics, Communications, and Computer Engineering, Helwan University, Cairo, Egypt","institution_ids":["https://openalex.org/I84058292"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083657631","display_name":"Samir G. Sayed","orcid":"https://orcid.org/0000-0001-7259-3296"},"institutions":[{"id":"https://openalex.org/I4210088986","display_name":"National Telecommunication Regulatory Authority","ror":"https://ror.org/007mwgz28","country_code":"EG","type":"government","lineage":["https://openalex.org/I4210088986"]}],"countries":["EG"],"is_corresponding":false,"raw_author_name":"Samir G. Sayed","raw_affiliation_strings":["Egyptian Computer Emergency Readiness Team (EG-CERT), National Telecom Regulatory Authority (NTRA), Cairo, Egypt"],"raw_orcid":"https://orcid.org/0000-0001-7259-3296","affiliations":[{"raw_affiliation_string":"Egyptian Computer Emergency Readiness Team (EG-CERT), National Telecom Regulatory Authority (NTRA), Cairo, Egypt","institution_ids":["https://openalex.org/I4210088986"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047798566","display_name":"Sameh A. Salem","orcid":"https://orcid.org/0000-0002-7553-4002"},"institutions":[{"id":"https://openalex.org/I4210088986","display_name":"National Telecommunication Regulatory Authority","ror":"https://ror.org/007mwgz28","country_code":"EG","type":"government","lineage":["https://openalex.org/I4210088986"]}],"countries":["EG"],"is_corresponding":false,"raw_author_name":"Sameh A. Salem","raw_affiliation_strings":["Egyptian Computer Emergency Readiness Team (EG-CERT), National Telecom Regulatory Authority (NTRA), Cairo, Egypt"],"raw_orcid":"https://orcid.org/0000-0002-7553-4002","affiliations":[{"raw_affiliation_string":"Egyptian Computer Emergency Readiness Team (EG-CERT), National Telecom Regulatory Authority (NTRA), Cairo, Egypt","institution_ids":["https://openalex.org/I4210088986"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.7108,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.72875766,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"7","issue":null,"first_page":"71780","last_page":"71790"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7967168092727661},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.750383734703064},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.5696069598197937},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.5364198684692383},{"id":"https://openalex.org/keywords/alarm","display_name":"ALARM","score":0.4761243462562561},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4493817985057831},{"id":"https://openalex.org/keywords/constant-false-alarm-rate","display_name":"Constant false alarm rate","score":0.44339001178741455},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.37438029050827026},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3412958085536957},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08250224590301514}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7967168092727661},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.750383734703064},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.5696069598197937},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.5364198684692383},{"id":"https://openalex.org/C2779119184","wikidata":"https://www.wikidata.org/wiki/Q294350","display_name":"ALARM","level":2,"score":0.4761243462562561},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4493817985057831},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.44339001178741455},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37438029050827026},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3412958085536957},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08250224590301514},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2019.2919680","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2919680","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08725491.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:c489cc3b1a824a1e9e9681dc4a8a86d9","is_oa":true,"landing_page_url":"https://doaj.org/article/c489cc3b1a824a1e9e9681dc4a8a86d9","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 71780-71790 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2919680","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2919680","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08725491.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.41999998688697815,"display_name":"Partnerships for the goals","id":"https://metadata.un.org/sdg/17"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320310120","display_name":"National Telecommunication Regulatory Authority","ror":"https://ror.org/007mwgz28"},{"id":"https://openalex.org/F4320313836","display_name":"Telecommunications Regulatory Authority","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2947292277.pdf","grobid_xml":"https://content.openalex.org/works/W2947292277.grobid-xml"},"referenced_works_count":43,"referenced_works":["https://openalex.org/W47988595","https://openalex.org/W191098608","https://openalex.org/W1515180657","https://openalex.org/W1583098994","https://openalex.org/W1633185320","https://openalex.org/W1775772884","https://openalex.org/W1809063480","https://openalex.org/W1983696266","https://openalex.org/W2016481708","https://openalex.org/W2038004736","https://openalex.org/W2038807247","https://openalex.org/W2044439547","https://openalex.org/W2047323027","https://openalex.org/W2056348361","https://openalex.org/W2070352186","https://openalex.org/W2077488147","https://openalex.org/W2091682045","https://openalex.org/W2099312541","https://openalex.org/W2160308729","https://openalex.org/W2169172206","https://openalex.org/W2292041963","https://openalex.org/W2538359960","https://openalex.org/W2544866080","https://openalex.org/W2567697112","https://openalex.org/W2576852759","https://openalex.org/W2577643777","https://openalex.org/W2583223619","https://openalex.org/W2619584748","https://openalex.org/W2635012095","https://openalex.org/W2733684447","https://openalex.org/W2750755351","https://openalex.org/W2765922195","https://openalex.org/W2774705946","https://openalex.org/W2806893345","https://openalex.org/W2808451423","https://openalex.org/W2814294926","https://openalex.org/W6601890406","https://openalex.org/W6634779276","https://openalex.org/W6636814054","https://openalex.org/W6638021444","https://openalex.org/W6684867273","https://openalex.org/W6731799078","https://openalex.org/W6741329323"],"related_works":["https://openalex.org/W2378211422","https://openalex.org/W2731305060","https://openalex.org/W4321353415","https://openalex.org/W2745001401","https://openalex.org/W2130974462","https://openalex.org/W2372003537","https://openalex.org/W2028665553","https://openalex.org/W2086519370","https://openalex.org/W2732807254","https://openalex.org/W4246352526"],"abstract_inverted_index":{"Attackers":[0],"tend":[1],"to":[2,8,54,96],"use":[3],"Remote":[4],"Access":[5],"Trojans":[6],"(RATs)":[7],"compromise":[9],"and":[10,36,79,109],"control":[11],"a":[12,28],"targeted":[13],"computer,":[14],"which":[15],"makes":[16],"the":[17,42,60,65,72,76,89,93,106,117,121,129,144],"RAT":[18],"detection":[19,58,107,124],"as":[20,120],"an":[21,81,149],"active":[22],"research":[23],"field.":[24],"This":[25],"paper":[26],"introduces":[27],"machine":[29],"learning-based":[30],"framework":[31,46,131],"for":[32,70,83],"detecting":[33],"compromised":[34],"hosts":[35],"networks":[37],"that":[38,51,143],"are":[39,52],"infected":[40],"by":[41,134],"RAT-Bots.":[43],"The":[44,62,86,101,126,139],"proposed":[45,122,145],"consists":[47],"of":[48,59,75,128,151],"two":[49],"agents":[50],"integrated":[53,102],"achieve":[55,116,148],"reliable":[56],"early":[57],"RAT-bots.":[61],"first":[63],"agent,":[64,67,88,91],"host":[66,78],"is":[68,132],"responsible":[69],"monitoring":[71],"system":[73],"behavior":[74],"running":[77],"raising":[80],"alarm":[82],"any":[84,98],"anomalies.":[85],"second":[87],"network":[90,94],"monitors":[92],"traffic":[95],"extract":[97],"malicious":[99],"patterns.":[100],"approach":[103,113,146],"improves":[104],"both":[105],"ratio":[108],"accuracy.":[110],"However,":[111],"each":[112],"cannot":[114],"separately":[115],"same":[118],"performance":[119,127],"RAT-Bots":[123],"framework.":[125],"introduced":[130],"evaluated":[133],"using":[135],"real-world":[136],"benchmark":[137],"datasets.":[138],"experimental":[140],"results":[141],"show":[142],"can":[147],"accuracy":[150],"98.83%":[152],"with":[153],"1.45%":[154],"false":[155],"positive":[156],"rate.":[157]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}