{"id":"https://openalex.org/W3114490715","doi":"https://doi.org/10.1109/icm50269.2020.9331819","title":"Optimized Random Forest Model for Botnet Detection Based on DNS Queries","display_name":"Optimized Random Forest Model for Botnet Detection Based on DNS Queries","publication_year":2020,"publication_date":"2020-12-14","ids":{"openalex":"https://openalex.org/W3114490715","doi":"https://doi.org/10.1109/icm50269.2020.9331819","mag":"3114490715"},"language":"en","primary_location":{"id":"doi:10.1109/icm50269.2020.9331819","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icm50269.2020.9331819","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 32nd International Conference on Microelectronics (ICM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2012.11326","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022670644","display_name":"Abdallah Moubayed","orcid":"https://orcid.org/0000-0002-1476-164X"},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Abdallah Moubayed","raw_affiliation_strings":["Electrical and Computer Engineering Department, Western University, London, Ontario, Canada","Western University,Electrical and Computer Engineering Department,London,Ontario,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering Department, Western University, London, Ontario, Canada","institution_ids":["https://openalex.org/I125749732"]},{"raw_affiliation_string":"Western University,Electrical and Computer Engineering Department,London,Ontario,Canada","institution_ids":["https://openalex.org/I125749732"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006496852","display_name":"MohammadNoor Injadat","orcid":"https://orcid.org/0000-0003-1959-0058"},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"MohammadNoor Injadat","raw_affiliation_strings":["Electrical and Computer Engineering Department, Western University, London, Ontario, Canada","Western University,Electrical and Computer Engineering Department,London,Ontario,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering Department, Western University, London, Ontario, Canada","institution_ids":["https://openalex.org/I125749732"]},{"raw_affiliation_string":"Western University,Electrical and Computer Engineering Department,London,Ontario,Canada","institution_ids":["https://openalex.org/I125749732"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041270670","display_name":"Abdallah Shami","orcid":"https://orcid.org/0000-0003-2887-0350"},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Abdallah Shami","raw_affiliation_strings":["Electrical and Computer Engineering Department, Western University, London, Ontario, Canada","University of western Ontario"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering Department, Western University, London, Ontario, Canada","institution_ids":["https://openalex.org/I125749732"]},{"raw_affiliation_string":"University of western Ontario","institution_ids":["https://openalex.org/I125749732"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I125749732"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9537161588668823},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7794348001480103},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.7084683179855347},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5466771721839905},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.5355626940727234},{"id":"https://openalex.org/keywords/domain-name-system","display_name":"Domain Name System","score":0.5189530849456787},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5174177885055542},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4949447512626648},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.49387913942337036},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4884265959262848},{"id":"https://openalex.org/keywords/domain-name","display_name":"Domain name","score":0.48797863721847534},{"id":"https://openalex.org/keywords/conditional-random-field","display_name":"Conditional random field","score":0.4765787124633789},{"id":"https://openalex.org/keywords/f1-score","display_name":"F1 score","score":0.4603867530822754},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.44761472940444946},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.34434008598327637},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3437047600746155},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3306569457054138},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.30884233117103577},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.0959022045135498}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9537161588668823},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7794348001480103},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.7084683179855347},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5466771721839905},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.5355626940727234},{"id":"https://openalex.org/C35026560","wikidata":"https://www.wikidata.org/wiki/Q8767","display_name":"Domain Name System","level":3,"score":0.5189530849456787},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5174177885055542},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4949447512626648},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.49387913942337036},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4884265959262848},{"id":"https://openalex.org/C2988987868","wikidata":"https://www.wikidata.org/wiki/Q32635","display_name":"Domain name","level":3,"score":0.48797863721847534},{"id":"https://openalex.org/C152565575","wikidata":"https://www.wikidata.org/wiki/Q1124538","display_name":"Conditional random field","level":2,"score":0.4765787124633789},{"id":"https://openalex.org/C148524875","wikidata":"https://www.wikidata.org/wiki/Q6975395","display_name":"F1 score","level":2,"score":0.4603867530822754},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.44761472940444946},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34434008598327637},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3437047600746155},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3306569457054138},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30884233117103577},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0959022045135498},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/icm50269.2020.9331819","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icm50269.2020.9331819","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 32nd International Conference on Microelectronics (ICM)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2012.11326","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2012.11326","pdf_url":"https://arxiv.org/pdf/2012.11326","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},{"id":"mag:3114490715","is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2012.11326.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2012.11326","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2012.11326","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2012.11326","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2012.11326","pdf_url":"https://arxiv.org/pdf/2012.11326","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},"sustainable_development_goals":[{"display_name":"Life in Land","score":0.6800000071525574,"id":"https://metadata.un.org/sdg/15"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3114490715.pdf","grobid_xml":"https://content.openalex.org/works/W3114490715.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W1761159547","https://openalex.org/W1877037860","https://openalex.org/W1888136415","https://openalex.org/W2082931571","https://openalex.org/W2088891725","https://openalex.org/W2096904130","https://openalex.org/W2122269925","https://openalex.org/W2148143831","https://openalex.org/W2166207903","https://openalex.org/W2565045400","https://openalex.org/W2605277152","https://openalex.org/W2609225916","https://openalex.org/W2801118360","https://openalex.org/W2883325838","https://openalex.org/W2889406945","https://openalex.org/W2891264640","https://openalex.org/W2904893217","https://openalex.org/W2907376671","https://openalex.org/W2913575586","https://openalex.org/W2916401208","https://openalex.org/W2937483190","https://openalex.org/W2947499652","https://openalex.org/W2979657369","https://openalex.org/W2981067590","https://openalex.org/W2981094074","https://openalex.org/W2982633340","https://openalex.org/W3009513989","https://openalex.org/W3012289806","https://openalex.org/W3022199973","https://openalex.org/W3044339716","https://openalex.org/W3045004532","https://openalex.org/W3047100881","https://openalex.org/W3048313003","https://openalex.org/W3101647584","https://openalex.org/W3107464100","https://openalex.org/W3117331835","https://openalex.org/W6637825345","https://openalex.org/W6754683785","https://openalex.org/W6781706134","https://openalex.org/W6785355238"],"related_works":["https://openalex.org/W3128483054","https://openalex.org/W2547278109","https://openalex.org/W3178436634","https://openalex.org/W2132449179","https://openalex.org/W2780141921","https://openalex.org/W3107888940","https://openalex.org/W3125745247","https://openalex.org/W3097571736","https://openalex.org/W2159909072","https://openalex.org/W2754468074","https://openalex.org/W2763168190","https://openalex.org/W2949494578","https://openalex.org/W3164510030","https://openalex.org/W2305712686","https://openalex.org/W3013098096","https://openalex.org/W3047380275","https://openalex.org/W2790704961","https://openalex.org/W2342992012","https://openalex.org/W2969623542","https://openalex.org/W2604146495"],"abstract_inverted_index":{"The":[0,123],"Domain":[1],"Name":[2],"System":[3],"(DNS)":[4],"protocol":[5,38],"plays":[6],"a":[7,47,76,100,109,118,129,154],"major":[8],"role":[9],"in":[10,177],"today's":[11],"Internet":[12],"as":[13,99,108],"it":[14,152],"translates":[15],"between":[16],"website":[17],"names":[18],"and":[19,33,104,160,171],"corresponding":[20,87],"IP":[21],"addresses.":[22],"However,":[23],"due":[24],"to":[25,46,58,81,113,149,163],"the":[26,36,92,115,138,143,164,169,174],"lack":[27],"of":[28,49,95,117,173],"processes":[29],"for":[30],"data":[31],"integrity":[32],"origin":[34],"authentication,":[35],"DNS":[37,88,132],"has":[39],"several":[40],"security":[41],"vulnerabilities.":[42],"This":[43,167],"often":[44],"leads":[45],"variety":[48],"cyber-attacks,":[50],"including":[51],"botnet":[52,61,179],"network":[53],"attacks.":[54,180],"One":[55],"promising":[56],"solution":[57],"detect":[59,82],"DNS-based":[60],"attacks":[62],"is":[63,126],"adopting":[64],"machine":[65],"learning":[66],"(ML)":[67],"based":[68,84],"solutions.":[69],"To":[70],"that":[71,137],"end,":[72],"this":[73],"paper":[74],"proposes":[75],"novel":[77],"optimized":[78,140],"ML-based":[79],"framework":[80,93,125,141,176],"botnets":[83],"on":[85],"their":[86],"queries.":[89],"More":[90],"specifically,":[91],"consists":[94],"using":[96,128],"information":[97],"gain":[98],"feature":[101,144],"selection":[102],"method":[103],"genetic":[105],"algorithm":[106],"(GA)":[107],"hyper-parameter":[110],"optimization":[111],"model":[112],"tune":[114],"parameters":[116],"random":[119],"forest":[120],"(RF)":[121],"classifier.":[122,166],"proposed":[124,139,175],"evaluated":[127],"state-of-the-art":[130],"TI-2016":[131],"dataset.":[133],"Experimental":[134],"results":[135],"show":[136],"reduced":[142],"set":[145],"size":[146],"by":[147],"up":[148],"60%.":[150],"Moreover,":[151],"achieved":[153],"high":[155],"detection":[156],"accuracy,":[157],"precision,":[158],"recall,":[159],"F-score":[161],"compared":[162],"default":[165],"highlights":[168],"effectiveness":[170],"robustness":[172],"detecting":[178]},"counts_by_year":[{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}