{"id":"https://openalex.org/W7084094480","doi":"https://doi.org/10.1109/infocom55648.2025.11044450","title":"GM-BFD: A Generalizable Multi-View Framework for Botnet Flow Detection","display_name":"GM-BFD: A Generalizable Multi-View Framework for Botnet Flow Detection","publication_year":2025,"publication_date":"2025-05-19","ids":{"openalex":"https://openalex.org/W7084094480","doi":"https://doi.org/10.1109/infocom55648.2025.11044450"},"language":"en","primary_location":{"id":"doi:10.1109/infocom55648.2025.11044450","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocom55648.2025.11044450","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2025 - IEEE Conference on Computer Communications","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Xuejiao Luo","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xuejiao Luo","raw_affiliation_strings":["Beijing University of Posts and Telecommunications"],"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Pengcheng Wei","orcid":null},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Pengcheng Wei","raw_affiliation_strings":["Singapore University of Technology and Design"],"affiliations":[{"raw_affiliation_string":"Singapore University of Technology and Design","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Wenyin Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wenyin Liu","raw_affiliation_strings":["Zhongguancun Laboratory"],"affiliations":[{"raw_affiliation_string":"Zhongguancun Laboratory","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jiahao Cao","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiahao Cao","raw_affiliation_strings":["Tsinghua University"],"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jiang Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang Li","raw_affiliation_strings":["Zhongguancun Laboratory"],"affiliations":[{"raw_affiliation_string":"Zhongguancun Laboratory","institution_ids":[]}]},{"author_position":"last","author":{"id":null,"display_name":"Binbin Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Binbin Chen","raw_affiliation_strings":["Singapore University of Technology and Design"],"affiliations":[{"raw_affiliation_string":"Singapore University of Technology and Design","institution_ids":["https://openalex.org/I152815399"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I139759216"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.57519245,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T14246","display_name":"E-Learning and Knowledge Management","score":0.05420000106096268,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T14246","display_name":"E-Learning and Knowledge Management","score":0.05420000106096268,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13273","display_name":"Knowledge Management in Higher Education","score":0.04399999976158142,"subfield":{"id":"https://openalex.org/subfields/3304","display_name":"Education"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11835","display_name":"Sustainability in Higher Education","score":0.042100001126527786,"subfield":{"id":"https://openalex.org/subfields/3304","display_name":"Education"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9459999799728394},{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.8041999936103821},{"id":"https://openalex.org/keywords/overfitting","display_name":"Overfitting","score":0.7275999784469604},{"id":"https://openalex.org/keywords/generalizability-theory","display_name":"Generalizability theory","score":0.6481999754905701},{"id":"https://openalex.org/keywords/flow-network","display_name":"Flow network","score":0.4984999895095825},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.49720001220703125},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.4458000063896179},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.40790000557899475}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9459999799728394},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.8041999936103821},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7350000143051147},{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.7275999784469604},{"id":"https://openalex.org/C27158222","wikidata":"https://www.wikidata.org/wiki/Q5532422","display_name":"Generalizability theory","level":2,"score":0.6481999754905701},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.4984999895095825},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.49799999594688416},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.49720001220703125},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4699000120162964},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4641999900341034},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.4458000063896179},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.40790000557899475},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4025999903678894},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.39629998803138733},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.3944999873638153},{"id":"https://openalex.org/C38349280","wikidata":"https://www.wikidata.org/wiki/Q1434290","display_name":"Flow (mathematics)","level":2,"score":0.38429999351501465},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.3452000021934509},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.3409999907016754},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.34049999713897705},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.33480000495910645},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.30169999599456787},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.27730000019073486},{"id":"https://openalex.org/C2776434776","wikidata":"https://www.wikidata.org/wiki/Q19246213","display_name":"Domain adaptation","level":3,"score":0.2720000147819519},{"id":"https://openalex.org/C32946077","wikidata":"https://www.wikidata.org/wiki/Q618079","display_name":"Network analysis","level":2,"score":0.2612999975681305},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2522999942302704}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/infocom55648.2025.11044450","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocom55648.2025.11044450","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2025 - IEEE Conference on Computer Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1419851695","display_name":null,"funder_award_id":"62202260","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"rapid":[1],"rise":[2],"of":[3,13,27,44,117,148,174,182],"botnet":[4,16,72],"attacks":[5],"has":[6],"disrupted":[7],"telecom":[8],"network":[9,55],"services":[10],"for":[11,21,71],"millions":[12],"users.":[14],"Detecting":[15],"traffic":[17],"is":[18],"therefore":[19],"important":[20],"maintaining":[22],"the":[23,41,87,91,98,128,162,169,187],"availability":[24],"and":[25,54,83,97,119,145,150,172],"quality":[26],"these":[28],"services.":[29],"Existing":[30],"methods":[31],"primarily":[32],"focus":[33],"on":[34,57],"developing":[35],"attack":[36,52],"detection":[37],"techniques":[38],"but":[39],"ignore":[40],"adverse":[42],"effects":[43],"various":[45],"real-world":[46],"factors,":[47],"such":[48],"as":[49,155,157],"changes":[50],"in":[51],"behaviors":[53,103],"conditions,":[56],"model":[58,137],"performance.":[59],"In":[60],"response":[61],"to":[62,142],"this":[63],"challenge,":[64],"we":[65],"propose":[66],"a":[67],"generalizable":[68],"multi-view":[69,111],"framework":[70],"flow":[73,79,95,102],"detection,":[74],"namely":[75],"GM-BFD.":[76],"GM-BFD":[77,131],"learns":[78],"representations":[80,147],"from":[81],"intra-flow":[82,88],"inter-flow":[84,99],"views,":[85],"where":[86],"view":[89,100],"extracts":[90,101],"complex":[92],"relationship":[93],"between":[94,104],"features,":[96],"hosts":[105],"while":[106],"avoiding":[107],"host":[108,122],"representations.":[109],"This":[110],"modeling":[112],"provides":[113],"an":[114,133,177],"expressive":[115],"representation":[116],"flows":[118,152],"avoids":[120],"overfitting":[121],"information":[123],"during":[124],"training.":[125],"To":[126],"enhance":[127],"model's":[129],"generalizability,":[130],"designs":[132],"un-supervised":[134],"domain":[135],"adaptation":[136],"with":[138,165,176],"prediction":[139],"confidence":[140],"filtering":[141],"learn":[143],"discriminative":[144],"transferable":[146],"benign":[149],"malicious":[151],"across":[153],"scenarios":[154,167],"accurately":[156],"possible.":[158],"Experimental":[159],"validation":[160],"using":[161],"CTU":[163],"dataset":[164],"13":[166],"demonstrates":[168],"superior":[170],"performance":[171],"generalizability":[173],"GM-BFD,":[175],"<tex":[178],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[179],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">$F_{1}$</tex>-score":[180],"improvement":[181],"approximately":[183],"11":[184],"%":[185],"over":[186],"best":[188],"baseline.":[189]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}