{"id":"https://openalex.org/W1973259798","doi":"https://doi.org/10.1109/iccitechnology.2013.6579517","title":"Botnet detection: A cooperative game theoretical correlation-based model","display_name":"Botnet detection: A cooperative game theoretical correlation-based model","publication_year":2013,"publication_date":"2013-06-01","ids":{"openalex":"https://openalex.org/W1973259798","doi":"https://doi.org/10.1109/iccitechnology.2013.6579517","mag":"1973259798"},"language":"en","primary_location":{"id":"doi:10.1109/iccitechnology.2013.6579517","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccitechnology.2013.6579517","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 Third International Conference on Communications and Information Technology (ICCIT)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065559578","display_name":"Noura Al Ebri","orcid":null},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]}],"countries":["AE"],"is_corresponding":true,"raw_author_name":"Noura Al Ebri","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Khalifa University of Science, Technology, and Research, Abu Dhabi, UAE","Dept. of Electr. & Comput. Eng., Khalifa Univ. of Sci., Technol. & Res., Abu Dhabi, United Arab Emirates"],"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Khalifa University of Science, Technology, and Research, Abu Dhabi, UAE","institution_ids":["https://openalex.org/I176601375"]},{"raw_affiliation_string":"Dept. of Electr. & Comput. Eng., Khalifa Univ. of Sci., Technol. & Res., Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I176601375"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049846737","display_name":"Hadi Otrok","orcid":"https://orcid.org/0000-0002-9574-5384"},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Hadi Otrok","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Khalifa University of Science, Technology, and Research, Abu Dhabi, UAE","Dept. of Electr. & Comput. Eng., Khalifa Univ. of Sci., Technol. & Res., Abu Dhabi, United Arab Emirates"],"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Khalifa University of Science, Technology, and Research, Abu Dhabi, UAE","institution_ids":["https://openalex.org/I176601375"]},{"raw_affiliation_string":"Dept. of Electr. & Comput. Eng., Khalifa Univ. of Sci., Technol. & Res., Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I176601375"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005269467","display_name":"Azzam Mourad","orcid":"https://orcid.org/0000-0001-9434-5322"},"institutions":[{"id":"https://openalex.org/I56306041","display_name":"Lebanese American University","ror":"https://ror.org/00hqkan37","country_code":"LB","type":"education","lineage":["https://openalex.org/I56306041"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Azzam Mourad","raw_affiliation_strings":["Lebanese American University, Beirut, Beirut, LB","Dept. of Comput. Sci. & Math., Lebanese American Univ., Beirut, Lebanon"],"affiliations":[{"raw_affiliation_string":"Lebanese American University, Beirut, Beirut, LB","institution_ids":["https://openalex.org/I56306041"]},{"raw_affiliation_string":"Dept. of Comput. Sci. & Math., Lebanese American Univ., Beirut, Lebanon","institution_ids":["https://openalex.org/I56306041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077119932","display_name":"Yousof Al-Hammadi","orcid":"https://orcid.org/0000-0001-6469-9154"},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Yousof Al-Hammadi","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Khalifa University of Science, Technology, and Research, Abu Dhabi, UAE","Dept. of Electr. & Comput. Eng., Khalifa Univ. of Sci., Technol. & Res., Abu Dhabi, United Arab Emirates"],"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Khalifa University of Science, Technology, and Research, Abu Dhabi, UAE","institution_ids":["https://openalex.org/I176601375"]},{"raw_affiliation_string":"Dept. of Electr. & Comput. Eng., Khalifa Univ. of Sci., Technol. & Res., Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I176601375"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5065559578"],"corresponding_institution_ids":["https://openalex.org/I176601375"],"apc_list":null,"apc_paid":null,"fwci":0.3625,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.62635748,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"28","last_page":"32"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9602067470550537},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7609246969223022},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.642139732837677},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.555367648601532},{"id":"https://openalex.org/keywords/reputation","display_name":"Reputation","score":0.5429662466049194},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.531267523765564},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.46103668212890625},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3778190612792969},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.158664733171463},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.10446107387542725}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9602067470550537},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7609246969223022},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.642139732837677},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.555367648601532},{"id":"https://openalex.org/C48798503","wikidata":"https://www.wikidata.org/wiki/Q877546","display_name":"Reputation","level":2,"score":0.5429662466049194},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.531267523765564},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.46103668212890625},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3778190612792969},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.158664733171463},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.10446107387542725},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iccitechnology.2013.6579517","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccitechnology.2013.6579517","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 Third International Conference on Communications and Information Technology (ICCIT)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7400000095367432}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1634954793","https://openalex.org/W1775772884","https://openalex.org/W1878198375","https://openalex.org/W1964439345","https://openalex.org/W1979818385","https://openalex.org/W2003116136","https://openalex.org/W2039469367","https://openalex.org/W2050598486","https://openalex.org/W2076786893","https://openalex.org/W2108005341","https://openalex.org/W2152547455","https://openalex.org/W2154874878","https://openalex.org/W2162101611","https://openalex.org/W2259808229","https://openalex.org/W4300337452","https://openalex.org/W6638021444","https://openalex.org/W6669809693"],"related_works":["https://openalex.org/W2294483539","https://openalex.org/W2378449000","https://openalex.org/W3187581118","https://openalex.org/W2938399969","https://openalex.org/W3143747655","https://openalex.org/W2002178493","https://openalex.org/W2901835651","https://openalex.org/W2883616266","https://openalex.org/W4230824443","https://openalex.org/W2292210693"],"abstract_inverted_index":{"In":[0],"this":[1],"paper,":[2],"we":[3,140,200],"address":[4],"the":[5,41,81,115,126,159,167,184,189,197,212],"problem":[6],"of":[7,21,40,53,107,112,117,128,196,208],"botnet":[8],"detection":[9,82,185],"by":[10,25],"correlating":[11],"information":[12],"from":[13,73,174],"trusted":[14,108,152],"hosts":[15,121,131,209],"and":[16,31,60,70,94,119,162],"network.":[17],"Botnets":[18],"are":[19,36,65,201],"groups":[20],"compromised":[22],"computers":[23],"controlled":[24],"a":[26,29,84,99,104,138,142,205],"botmaster":[27],"through":[28],"command":[30],"control":[32],"(C&C)":[33],"channel.":[34],"They":[35],"noted":[37],"as":[38,50],"one":[39,195],"foremost":[42],"security":[43],"threat":[44],"causing":[45],"large":[46],"scale":[47],"attacks":[48],"such":[49],"Distributed":[51],"Denial":[52],"Service":[54],"(DDoS),":[55],"Spam,":[56],"mass":[57],"identity":[58],"theft":[59],"click":[61],"fraud.":[62],"Various":[63],"approaches":[64],"used":[66],"to":[67,75,150,188,203],"detect":[68,204],"botnets":[69],"they":[71],"range":[72],"network":[74,95,105],"host":[76,93],"level":[77,96],"detection.":[78],"To":[79],"enhance":[80],"rate,":[83],"correlation":[85,191,214],"based":[86],"model":[87,100,144,182],"was":[88],"proposed":[89],"that":[90,132,145,180],"combines":[91],"both":[92],"information.":[97,136],"Such":[98],"is":[101,156,164,172],"valid":[102],"in":[103,122,194],"made":[106],"hosts.":[109,153],"The":[110,154],"emergence":[111],"smartphones":[113],"with":[114],"capability":[116],"mobility":[118],"being":[120],"different":[123],"networks,":[124],"open":[125],"door":[127],"having":[129],"untrusted":[130],"can":[133],"reveal":[134],"fake":[135],"As":[137],"solution,":[139],"propose":[141],"trust-based":[143],"uses":[146],"cooperative":[147],"game":[148],"theory":[149],"cluster":[151,207],"trust":[155],"built":[157],"using":[158,166],"reputation":[160],"value":[161],"it":[163],"computed":[165],"hosts'":[168],"marginal":[169],"contribution":[170],"which":[171],"derived":[173],"Shapley":[175],"value.":[176],"Simulation":[177],"results":[178],"show":[179],"our":[181],"improves":[183],"score":[186],"compared":[187],"traditional":[190,213],"model.":[192,215],"Where":[193],"simulated":[198],"scenarios":[199],"able":[202],"benign":[206],"faster":[210],"than":[211]},"counts_by_year":[{"year":2019,"cited_by_count":1},{"year":2015,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}