{"id":"https://openalex.org/W2959169310","doi":"https://doi.org/10.1109/icc.2019.8761337","title":"Evading Machine Learning Botnet Detection Models via Deep Reinforcement Learning","display_name":"Evading Machine Learning Botnet Detection Models via Deep Reinforcement Learning","publication_year":2019,"publication_date":"2019-05-01","ids":{"openalex":"https://openalex.org/W2959169310","doi":"https://doi.org/10.1109/icc.2019.8761337","mag":"2959169310"},"language":"en","primary_location":{"id":"doi:10.1109/icc.2019.8761337","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2019.8761337","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2019 - 2019 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100602151","display_name":"Di Wu","orcid":"https://orcid.org/0000-0002-7788-9202"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Di Wu","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113587199","display_name":"Binxing Fang","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Binxing Fang","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060172307","display_name":"Junnan Wang","orcid":"https://orcid.org/0000-0003-0366-6564"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junnan Wang","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004834139","display_name":"Qixu Liu","orcid":"https://orcid.org/0000-0003-0895-9585"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qixu Liu","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055905208","display_name":"Xiang Cui","orcid":"https://orcid.org/0000-0003-4779-4365"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang Cui","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.772,"has_fulltext":false,"cited_by_count":61,"citation_normalized_percentile":{"value":0.95966921,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.8977614641189575},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.836104154586792},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.806189775466919},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7920355796813965},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.7075178027153015},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.7055611610412598},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5940207839012146},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5716648101806641},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5502462983131409},{"id":"https://openalex.org/keywords/snapshot","display_name":"Snapshot (computer storage)","score":0.4646240174770355},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.41025733947753906},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.39238664507865906},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2853626608848572}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.8977614641189575},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.836104154586792},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.806189775466919},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7920355796813965},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7075178027153015},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.7055611610412598},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5940207839012146},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5716648101806641},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5502462983131409},{"id":"https://openalex.org/C55282118","wikidata":"https://www.wikidata.org/wiki/Q252683","display_name":"Snapshot (computer storage)","level":2,"score":0.4646240174770355},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.41025733947753906},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39238664507865906},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2853626608848572},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icc.2019.8761337","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2019.8761337","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2019 - 2019 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.699999988079071,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W34239198","https://openalex.org/W1567574980","https://openalex.org/W2026621111","https://openalex.org/W2095577883","https://openalex.org/W2110675786","https://openalex.org/W2145339207","https://openalex.org/W2312609093","https://openalex.org/W2432142698","https://openalex.org/W2469580049","https://openalex.org/W2528572867","https://openalex.org/W2528827134","https://openalex.org/W2574797807","https://openalex.org/W2603766943","https://openalex.org/W2606697812","https://openalex.org/W2963070423","https://openalex.org/W2964153729","https://openalex.org/W4214717370","https://openalex.org/W4285719527","https://openalex.org/W6780559895"],"related_works":["https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964","https://openalex.org/W3048732067","https://openalex.org/W4383468834","https://openalex.org/W4384648009","https://openalex.org/W4303645823","https://openalex.org/W2900159906","https://openalex.org/W4283221438","https://openalex.org/W4287828318"],"abstract_inverted_index":{"Botnets":[0],"are":[1,49,65,211],"one":[2],"of":[3,29,71,78,176,188,207,218],"predominant":[4],"threats":[5],"to":[6,25,34,51,62,67,75,119,128,146,181],"Internet":[7],"security.":[8],"To":[9],"date,":[10],"machine":[11,43],"learning":[12,44,111,152],"technology":[13],"has":[14],"wide":[15],"application":[16],"in":[17,41],"botnet":[18,36,209],"detection":[19,54,122,225],"because":[20],"that":[21,47,203],"it":[22],"is":[23,154,179],"able":[24,50,180],"summarize":[26],"the":[27,53,76,82,121,131,133,158,163,166,174,183,189,194,204,216,224,233],"features":[28,187],"existing":[30],"attacks":[31,85],"and":[32,95,143,173,185,197,230],"generalize":[33],"never-before-seen":[35],"families.":[37],"However,":[38],"recent":[39],"works":[40],"adversarial":[42,84,116,159,208],"have":[45],"shown":[46],"attackers":[48],"bypass":[52],"model":[55,123,168,226],"by":[56,124,161],"constructing":[57],"specific":[58],"samples,":[59],"which":[60,113,178],"due":[61],"many":[63],"algorithms":[64],"vulnerable":[66],"almost":[68],"imperceptible":[69],"perturbations":[70,127],"their":[72],"inputs.":[73],"According":[74],"degree":[77],"adversaries'":[79],"knowledge":[80],"about":[81],"model,":[83],"can":[86,222],"be":[87,137],"classified":[88],"into":[89],"several":[90],"groups,":[91],"such":[92],"as":[93,139],"gradient-":[94],"score-based":[96],"attacks.":[97],"In":[98],"this":[99,220],"paper,":[100],"we":[101],"propose":[102],"a":[103,140],"more":[104,144],"general":[105],"framework":[106],"based":[107],"on":[108],"deep":[109],"reinforcement":[110,151],"(DRL),":[112],"effectively":[114],"generates":[115],"traffic":[117,190],"flows":[118,191,210],"deceive":[120],"automatically":[125],"adding":[126],"samples.":[129],"Throughout":[130],"process,":[132],"target":[134,167],"detector":[135],"will":[136],"regarded":[138],"black":[141],"box":[142],"close":[145],"realistic":[147],"attack":[148],"circumstance.":[149],"A":[150],"agent":[153],"equipped":[155],"for":[156],"updating":[157],"samples":[160],"combining":[162],"feedback":[164],"from":[165],"(i.e.":[169],"benign":[170],"or":[171],"malicious)":[172],"sequence":[175],"actions,":[177],"change":[182],"temporal":[184],"spatial":[186],"while":[192],"maintaining":[193],"original":[195],"functionality":[196],"executability.":[198],"The":[199],"experiment":[200],"results":[201],"show":[202],"evasion":[205],"rates":[206],"significantly":[212],"improved.":[213],"Furthermore,":[214],"with":[215],"perspective":[217],"defense,":[219],"research":[221],"help":[223],"spot":[227],"its":[228],"defect":[229],"thus":[231],"enhance":[232],"robustness.":[234]},"counts_by_year":[{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":14},{"year":2021,"cited_by_count":11},{"year":2020,"cited_by_count":8}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}