{"id":"https://openalex.org/W2073119119","doi":"https://doi.org/10.1109/iccnc.2014.6785439","title":"An efficient flow-based botnet detection using supervised machine learning","display_name":"An efficient flow-based botnet detection using supervised machine learning","publication_year":2014,"publication_date":"2014-02-01","ids":{"openalex":"https://openalex.org/W2073119119","doi":"https://doi.org/10.1109/iccnc.2014.6785439","mag":"2073119119"},"language":"en","primary_location":{"id":"doi:10.1109/iccnc.2014.6785439","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccnc.2014.6785439","pdf_url":null,"source":{"id":"https://openalex.org/S4306497883","display_name":"2014 International Conference on Computing, Networking and Communications (ICNC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 International Conference on Computing, Networking and Communications (ICNC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055505636","display_name":"Matija Stevanovic","orcid":"https://orcid.org/0000-0002-9579-4901"},"institutions":[{"id":"https://openalex.org/I891191580","display_name":"Aalborg University","ror":"https://ror.org/04m5j1k67","country_code":"DK","type":"education","lineage":["https://openalex.org/I891191580"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Matija Stevanovic","raw_affiliation_strings":["Department of Electronic Systems, Networking and Security Section, Aalborg University, Aalborg, Denmark","[Dept. of Electron. Syst., Aalborg Univ., Aalborg, Denmark]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electronic Systems, Networking and Security Section, Aalborg University, Aalborg, Denmark","institution_ids":["https://openalex.org/I891191580"]},{"raw_affiliation_string":"[Dept. of Electron. Syst., Aalborg Univ., Aalborg, Denmark]","institution_ids":["https://openalex.org/I891191580"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034797912","display_name":"Jens Myrup Pedersen","orcid":"https://orcid.org/0000-0002-1903-2921"},"institutions":[{"id":"https://openalex.org/I891191580","display_name":"Aalborg University","ror":"https://ror.org/04m5j1k67","country_code":"DK","type":"education","lineage":["https://openalex.org/I891191580"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Jens Myrup Pedersen","raw_affiliation_strings":["Department of Electronic Systems, Networking and Security Section, Aalborg University, Aalborg, Denmark","[Dept. of Electron. Syst., Aalborg Univ., Aalborg, Denmark]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electronic Systems, Networking and Security Section, Aalborg University, Aalborg, Denmark","institution_ids":["https://openalex.org/I891191580"]},{"raw_affiliation_string":"[Dept. of Electron. Syst., Aalborg Univ., Aalborg, Denmark]","institution_ids":["https://openalex.org/I891191580"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I891191580"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":132,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"797","last_page":"801"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9893437623977661},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7583012580871582},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6297943592071533},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5670379996299744},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5648742914199829},{"id":"https://openalex.org/keywords/flow-network","display_name":"Flow network","score":0.5514833927154541},{"id":"https://openalex.org/keywords/supervised-learning","display_name":"Supervised learning","score":0.5144603252410889},{"id":"https://openalex.org/keywords/traffic-flow","display_name":"Traffic flow (computer networking)","score":0.47352123260498047},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.4354550838470459},{"id":"https://openalex.org/keywords/traffic-analysis","display_name":"Traffic analysis","score":0.41725295782089233},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3473920226097107},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.28571635484695435},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.2420390546321869},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.1590665578842163},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.07180508971214294}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9893437623977661},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7583012580871582},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6297943592071533},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5670379996299744},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5648742914199829},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.5514833927154541},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.5144603252410889},{"id":"https://openalex.org/C207512268","wikidata":"https://www.wikidata.org/wiki/Q3074551","display_name":"Traffic flow (computer networking)","level":2,"score":0.47352123260498047},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.4354550838470459},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.41725295782089233},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3473920226097107},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.28571635484695435},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2420390546321869},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.1590665578842163},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.07180508971214294},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/iccnc.2014.6785439","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccnc.2014.6785439","pdf_url":null,"source":{"id":"https://openalex.org/S4306497883","display_name":"2014 International Conference on Computing, Networking and Communications (ICNC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 International Conference on Computing, Networking and Communications (ICNC)","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.atira.dk:publications/7c50318a-4b61-40d9-af64-6466f22ccb18","is_oa":false,"landing_page_url":"https://vbn.aau.dk/da/publications/7c50318a-4b61-40d9-af64-6466f22ccb18","pdf_url":null,"source":{"id":"https://openalex.org/S4306401731","display_name":"VBN Forskningsportal (Aalborg Universitet)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I891191580","host_organization_name":"Aalborg University","host_organization_lineage":["https://openalex.org/I891191580"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Stevanovic , M & Pedersen , J M 2014 , An efficient flow-based botnet detection using supervised machine learning . in Computing, Networking and Communications (ICNC), 2014 International Conference on . IEEE Press , International Conference on Computing, Networking and Communications , pp. 797-801 , International Conference on Computing, Networking and Communications , Honolulu, Hawaii , United States , 03/02/2014 . https://doi.org/10.1109/ICCNC.2014.6785439","raw_type":"contributionToPeriodical"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W1570448133","https://openalex.org/W1909494783","https://openalex.org/W1930645144","https://openalex.org/W1992713826","https://openalex.org/W2099452399","https://openalex.org/W2114996745","https://openalex.org/W2541577949"],"related_works":["https://openalex.org/W3129800954","https://openalex.org/W2225089553","https://openalex.org/W2398634398","https://openalex.org/W2082456656","https://openalex.org/W2026621111","https://openalex.org/W4399181772","https://openalex.org/W4293901154","https://openalex.org/W4286718853","https://openalex.org/W4211147623","https://openalex.org/W4296473472"],"abstract_inverted_index":{"Botnet":[0],"detection":[1,20,49,162,195],"represents":[2],"one":[3],"of":[4,9,32,99,111,128,177,186],"the":[5,30,43,65,76,81,97,109,132,153,188],"most":[6],"crucial":[7],"prerequisites":[8],"successful":[10],"botnet":[11,36,59,141],"neutralization.":[12],"This":[13,181],"paper":[14,44,82],"explores":[15],"how":[16,84],"accurate":[17,161],"and":[18,122,138,148,175],"timely":[19,139],"can":[21],"be":[22,89,167],"achieved":[23],"by":[24],"using":[25,113,143,187],"supervised":[26,54,149],"machine":[27,55,72,150],"learning":[28,56,73],"as":[29],"tool":[31],"inferring":[33],"about":[34],"malicious":[35,100],"traffic.":[37,61,101],"In":[38],"order":[39,94,158],"to":[40,88,95,136,159,166],"do":[41],"so,":[42],"introduces":[45],"a":[46,171,183,192],"novel":[47],"flow-based":[48,145],"system":[50,66,104,133],"that":[51,131,156],"relies":[52],"on":[53],"for":[57,169],"identifying":[58],"network":[60],"For":[62],"use":[63],"in":[64,93,157],"we":[67],"consider":[68],"eight":[69],"highly":[70],"regarded":[71],"algorithms,":[74],"indicating":[75],"best":[77],"performing":[78],"one.":[79],"Furthermore,":[80],"evaluates":[83],"much":[85],"traffic":[86,114,142,146,163],"needs":[87],"observed":[90],"per":[91,179],"flow":[92],"capture":[96],"patterns":[98],"The":[102,126],"proposed":[103,189],"has":[105],"been":[106],"tested":[107],"through":[108],"series":[110],"experiments":[112,129],"traces":[115],"originating":[116],"from":[117],"two":[118],"well-known":[119],"P2P":[120],"botnets":[121],"diverse":[123],"non-malicious":[124],"applications.":[125],"results":[127,154],"indicate":[130],"is":[134],"able":[135],"accurately":[137],"detect":[140],"purely":[144],"analysis":[147],"learning.":[151],"Additionally,":[152],"show":[155],"achieve":[160],"flows":[164],"need":[165],"monitored":[168],"only":[170],"limited":[172],"time":[173],"period":[174],"number":[176],"packets":[178],"flow.":[180],"indicates":[182],"strong":[184],"potential":[185],"approach":[190],"within":[191],"future":[193],"on-line":[194],"framework.":[196]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":9},{"year":2020,"cited_by_count":35},{"year":2019,"cited_by_count":11},{"year":2018,"cited_by_count":18},{"year":2017,"cited_by_count":11},{"year":2016,"cited_by_count":7},{"year":2015,"cited_by_count":9},{"year":2014,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}