{"id":"https://openalex.org/W3164537065","doi":"https://doi.org/10.1109/access.2021.3110188","title":"An Automated and Comprehensive Framework for IoT Botnet Detection and Analysis (IoT-BDA)","display_name":"An Automated and Comprehensive Framework for IoT Botnet Detection and Analysis (IoT-BDA)","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3164537065","doi":"https://doi.org/10.1109/access.2021.3110188","mag":"3164537065"},"language":"en","primary_location":{"id":"doi:10.1109/access.2021.3110188","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3110188","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/09529169.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/09529169.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5083504056","display_name":"Tolijan Trajanovski","orcid":"https://orcid.org/0000-0002-4552-2297"},"institutions":[{"id":"https://openalex.org/I28407311","display_name":"University of Manchester","ror":"https://ror.org/027m9bs27","country_code":"GB","type":"education","lineage":["https://openalex.org/I28407311"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Tolijan Trajanovski","raw_affiliation_strings":["Department of Computer Science, The University of Manchester, Manchester, U.K"],"raw_orcid":"https://orcid.org/0000-0002-4552-2297","affiliations":[{"raw_affiliation_string":"Department of Computer Science, The University of Manchester, Manchester, U.K","institution_ids":["https://openalex.org/I28407311"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100404886","display_name":"Ning Zhang","orcid":"https://orcid.org/0000-0002-8781-4925"},"institutions":[{"id":"https://openalex.org/I28407311","display_name":"University of Manchester","ror":"https://ror.org/027m9bs27","country_code":"GB","type":"education","lineage":["https://openalex.org/I28407311"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ning Zhang","raw_affiliation_strings":["Department of Computer Science, The University of Manchester, Manchester, U.K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, The University of Manchester, Manchester, U.K","institution_ids":["https://openalex.org/I28407311"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5083504056"],"corresponding_institution_ids":["https://openalex.org/I28407311"],"apc_list":{"value":1750,"currency":"USD","value_usd":1750},"apc_paid":{"value":1750,"currency":"USD","value_usd":1750},"fwci":6.0222,"has_fulltext":true,"cited_by_count":67,"citation_normalized_percentile":{"value":0.96366369,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":100},"biblio":{"volume":"9","issue":null,"first_page":"124360","last_page":"124383"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9422562122344971},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.8598132133483887},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7445783615112305},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42890042066574097},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.31035035848617554},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.16125807166099548}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9422562122344971},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.8598132133483887},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7445783615112305},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42890042066574097},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.31035035848617554},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.16125807166099548}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/access.2021.3110188","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3110188","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/09529169.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2105.11061","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2105.11061","pdf_url":"https://arxiv.org/pdf/2105.11061","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:pure.atira.dk:publications/aa8a834d-90e0-4275-8595-0d2274923322","is_oa":true,"landing_page_url":"https://research.manchester.ac.uk/en/publications/aa8a834d-90e0-4275-8595-0d2274923322","pdf_url":"https://pure.manchester.ac.uk/ws/files/199172199/An_Automated_and_Comprehensive_Framework_for_IoT_Botnet_Detection_and_Analysis_IoT_BDA.pdf","source":{"id":"https://openalex.org/S4306400662","display_name":"Research Explorer (The University of Manchester)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I28407311","host_organization_name":"University of Manchester","host_organization_lineage":["https://openalex.org/I28407311"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Trajanovski, T & Zhang, N 2021, 'An Automated and Comprehensive Framework for IoT Botnet Detection and Analysis (IoT-BDA)', IEEE Access, vol. 9, pp. 124360-124383. https://doi.org/10.1109/ACCESS.2021.3110188","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:262c145f8cb24330b5cb1fa5da31a9e1","is_oa":true,"landing_page_url":"https://doaj.org/article/262c145f8cb24330b5cb1fa5da31a9e1","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 9, Pp 124360-124383 (2021)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2021.3110188","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3110188","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/09529169.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.49000000953674316}],"awards":[],"funders":[{"id":"https://openalex.org/F4320320291","display_name":"University of Manchester","ror":"https://ror.org/027m9bs27"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3164537065.pdf","grobid_xml":"https://content.openalex.org/works/W3164537065.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W1557252148","https://openalex.org/W1669806660","https://openalex.org/W2015790908","https://openalex.org/W2151584216","https://openalex.org/W2514847810","https://openalex.org/W2579739707","https://openalex.org/W2602321133","https://openalex.org/W2733765803","https://openalex.org/W2748868501","https://openalex.org/W2765751359","https://openalex.org/W2773100910","https://openalex.org/W2774161712","https://openalex.org/W2794801050","https://openalex.org/W2799758613","https://openalex.org/W2848278845","https://openalex.org/W2883021761","https://openalex.org/W2886665116","https://openalex.org/W2891413988","https://openalex.org/W2923481942","https://openalex.org/W2945722842","https://openalex.org/W2991419331","https://openalex.org/W3010754046","https://openalex.org/W3027431742","https://openalex.org/W3048252966","https://openalex.org/W3122864121","https://openalex.org/W6637397297","https://openalex.org/W6743493502","https://openalex.org/W6753041022","https://openalex.org/W6753284541"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W3159690896","https://openalex.org/W4230824443","https://openalex.org/W1989286518","https://openalex.org/W2945572725","https://openalex.org/W2921012173","https://openalex.org/W2758517546","https://openalex.org/W3134680667","https://openalex.org/W2804396347","https://openalex.org/W2185943007"],"abstract_inverted_index":{"The":[0,23,45,132,180,195,231],"proliferation":[1],"of":[2,47,82,92,106,129,135,147,156,211,217],"insecure":[3],"Internet-connected":[4],"devices":[5],"gave":[6],"rise":[7],"to":[8,98,185,191,207],"the":[9,50,54,58,80,83,89,96,119,183,199,204,209,215,220],"IoT":[10,28,37,107,130,228,237],"botnets":[11,29,238],"which":[12,72],"can":[13,153,169],"grow":[14],"very":[15],"large":[16],"rapidly":[17],"and":[18,42,95,104,114,127,149,152,158,164,173,175,188,203,224,242],"may":[19,75],"perform":[20],"high-impact":[21],"cyber-attacks.":[22],"related":[24],"studies":[25],"for":[26,64,101,122],"tackling":[27],"are":[30],"concerned":[31],"with":[32,138,161],"either":[33],"capturing":[34],"or":[35],"analyzing":[36],"botnet":[38,74,171,193,229],"samples,":[39],"using":[40],"honeypots":[41,59,136],"sandboxes,":[43,67],"respectively.":[44],"lack":[46],"integration":[48],"between":[49],"two":[51],"implies":[52],"that":[53,142,235],"samples":[55],"captured":[56],"by":[57,88],"must":[60],"be":[61],"manually":[62],"submitted":[63],"analysis":[65,232],"in":[66,247],"introducing":[68],"a":[69,73,116,139,144,186],"delay":[70],"during":[71],"change":[76],"its":[77],"operation.":[78],"Furthermore,":[79],"effectiveness":[81],"proposed":[84],"sandboxes":[85],"is":[86],"limited":[87],"potential":[90],"use":[91],"anti-analysis":[93],"techniques":[94,202,244],"inability":[97],"identify":[99,154],"features":[100,168],"effective":[102],"detection":[103,172],"identification":[105],"botnets.":[108,131,249],"In":[109],"this":[110],"paper,":[111],"we":[112],"propose":[113],"evaluate":[115],"novel":[117,140],"framework,":[118,121],"IoT-BDA":[120],"automated":[123],"capturing,":[124],"analysis,":[125,174],"identification,":[126],"reporting":[128],"framework":[133,181,221],"consists":[134],"integrated":[137],"sandbox":[141],"supports":[143],"wider":[145],"range":[146],"hardware":[148],"software":[150],"configurations,":[151],"indicators":[155],"compromise":[157],"attack,":[159],"along":[160],"anti-analysis,":[162,240],"persistence,":[163,241],"anti-forensics":[165,243],"techniques.":[166],"These":[167],"make":[170],"infection":[176],"remedy":[177],"more":[178],"effective.":[179],"reports":[182],"findings":[184],"blacklist":[187],"abuse":[189],"service":[190],"facilitate":[192],"suspension.":[194],"paper":[196],"also":[197],"describes":[198],"discovered":[200],"anti-honeypot":[201],"measures":[205],"applied":[206],"reduce":[208],"risk":[210],"honeypot":[212],"detection.":[213],"Over":[214],"period":[216],"seven":[218],"months,":[219],"captured,":[222],"analyzed,":[223],"reported":[225],"4077":[226],"unique":[227],"samples.":[230],"results":[233],"show":[234],"some":[236],"used":[239],"typically":[245],"seen":[246],"traditional":[248]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":19},{"year":2024,"cited_by_count":17},{"year":2023,"cited_by_count":17},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":1}],"updated_date":"2026-08-28T12:50:07.497085","created_date":"2025-10-10T00:00:00"}