{"id":"https://openalex.org/W3035366542","doi":"https://doi.org/10.1109/jiot.2020.3002255","title":"CorrAUC: A Malicious Bot-IoT Traffic Detection Method in IoT Network Using Machine-Learning Techniques","display_name":"CorrAUC: A Malicious Bot-IoT Traffic Detection Method in IoT Network Using Machine-Learning Techniques","publication_year":2020,"publication_date":"2020-06-15","ids":{"openalex":"https://openalex.org/W3035366542","doi":"https://doi.org/10.1109/jiot.2020.3002255","mag":"3035366542"},"language":"en","primary_location":{"id":"doi:10.1109/jiot.2020.3002255","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2020.3002255","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://e-space.mmu.ac.uk/626648/9/2020-IEEE%20IoT%20J-%20CorrAUC%20e.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100771200","display_name":"Muhammad Shafiq","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Muhammad Shafiq","raw_affiliation_strings":["Department of Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"affiliations":[{"raw_affiliation_string":"Department of Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056608045","display_name":"Zhihong Tian","orcid":"https://orcid.org/0000-0002-9409-5359"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhihong Tian","raw_affiliation_strings":["Department of Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"affiliations":[{"raw_affiliation_string":"Department of Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088617561","display_name":"Ali Kashif Bashir","orcid":"https://orcid.org/0000-0003-2601-9327"},"institutions":[{"id":"https://openalex.org/I11983389","display_name":"Manchester Metropolitan University","ror":"https://ror.org/02hstj355","country_code":"GB","type":"education","lineage":["https://openalex.org/I11983389"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ali Kashif Bashir","raw_affiliation_strings":["Department of Computing and Mathematics, Manchester Metropolitan University, Manchester, U.K"],"affiliations":[{"raw_affiliation_string":"Department of Computing and Mathematics, Manchester Metropolitan University, Manchester, U.K","institution_ids":["https://openalex.org/I11983389"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060514022","display_name":"Xiaojiang Du","orcid":"https://orcid.org/0000-0003-4235-9671"},"institutions":[{"id":"https://openalex.org/I84392919","display_name":"Temple University","ror":"https://ror.org/00kx1jb78","country_code":"US","type":"education","lineage":["https://openalex.org/I84392919"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaojiang Du","raw_affiliation_strings":["Department of Computer and Information Sciences, Temple University, Philadelphia, PA, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer and Information Sciences, Temple University, Philadelphia, PA, USA","institution_ids":["https://openalex.org/I84392919"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057916222","display_name":"Mohsen Guizani","orcid":"https://orcid.org/0000-0002-8972-8094"},"institutions":[{"id":"https://openalex.org/I60342839","display_name":"Qatar University","ror":"https://ror.org/00yhnba62","country_code":"QA","type":"education","lineage":["https://openalex.org/I60342839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Mohsen Guizani","raw_affiliation_strings":["Department of Computer Science and Engineering, Qatar University, Doha, Qatar"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Qatar University, Doha, Qatar","institution_ids":["https://openalex.org/I60342839"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5100771200"],"corresponding_institution_ids":["https://openalex.org/I37987034"],"apc_list":null,"apc_paid":null,"fwci":54.3751,"has_fulltext":true,"cited_by_count":520,"citation_normalized_percentile":{"value":0.99961663,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"8","issue":"5","first_page":"3242","last_page":"3254"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8437687158584595},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.6063450574874878},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5296580195426941},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.4972985088825226},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.4887208938598633},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.45843181014060974},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.4557762145996094},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.45134398341178894},{"id":"https://openalex.org/keywords/traffic-analysis","display_name":"Traffic analysis","score":0.4213399887084961},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.41456156969070435},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3778746724128723},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3206877112388611},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.29682260751724243},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2911696135997772},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.12681818008422852}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8437687158584595},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.6063450574874878},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5296580195426941},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4972985088825226},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.4887208938598633},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.45843181014060974},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.4557762145996094},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.45134398341178894},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.4213399887084961},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.41456156969070435},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3778746724128723},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3206877112388611},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.29682260751724243},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2911696135997772},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.12681818008422852},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/jiot.2020.3002255","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2020.3002255","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},{"id":"pmh:oai:e-space.mmu.ac.uk:626648","is_oa":true,"landing_page_url":"https://e-space.mmu.ac.uk/view/authors/aa810054662093994e6fff167e9d7a16.html>","pdf_url":"https://e-space.mmu.ac.uk/626648/9/2020-IEEE%20IoT%20J-%20CorrAUC%20e.pdf","source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"PeerReviewed"},{"id":"pmh:oai:qspace.qu.edu.qa:10576/35886","is_oa":false,"landing_page_url":"http://hdl.handle.net/10576/35886","pdf_url":null,"source":{"id":"https://openalex.org/S4306400014","display_name":"Qatar University QSpace (Qatar University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60342839","host_organization_name":"Qatar University","host_organization_lineage":["https://openalex.org/I60342839"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"}],"best_oa_location":{"id":"pmh:oai:e-space.mmu.ac.uk:626648","is_oa":true,"landing_page_url":"https://e-space.mmu.ac.uk/view/authors/aa810054662093994e6fff167e9d7a16.html>","pdf_url":"https://e-space.mmu.ac.uk/626648/9/2020-IEEE%20IoT%20J-%20CorrAUC%20e.pdf","source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"PeerReviewed"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1231421488","display_name":null,"funder_award_id":"under","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1477544716","display_name":null,"funder_award_id":"Guangdong","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2087396116","display_name":null,"funder_award_id":"China","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2998104513","display_name":null,"funder_award_id":"61871140","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3280188804","display_name":null,"funder_award_id":"2019B010137004","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3317480652","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G391238517","display_name":null,"funder_award_id":", and","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5994120800","display_name":null,"funder_award_id":"Natural","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7124766240","display_name":null,"funder_award_id":"2018YFB0803504","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3035366542.pdf","grobid_xml":"https://content.openalex.org/works/W3035366542.grobid-xml"},"referenced_works_count":54,"referenced_works":["https://openalex.org/W239165158","https://openalex.org/W1752315353","https://openalex.org/W1978352585","https://openalex.org/W1985727365","https://openalex.org/W1989832241","https://openalex.org/W2012468319","https://openalex.org/W2027277382","https://openalex.org/W2048880675","https://openalex.org/W2050243336","https://openalex.org/W2053059469","https://openalex.org/W2080765376","https://openalex.org/W2092505457","https://openalex.org/W2097623490","https://openalex.org/W2113047229","https://openalex.org/W2114337635","https://openalex.org/W2124297996","https://openalex.org/W2128569883","https://openalex.org/W2133462743","https://openalex.org/W2150847526","https://openalex.org/W2162572433","https://openalex.org/W2170018742","https://openalex.org/W2554143355","https://openalex.org/W2580726360","https://openalex.org/W2588781394","https://openalex.org/W2613548641","https://openalex.org/W2618663295","https://openalex.org/W2741656928","https://openalex.org/W2766956416","https://openalex.org/W2780737595","https://openalex.org/W2792628397","https://openalex.org/W2793188405","https://openalex.org/W2799758613","https://openalex.org/W2808681425","https://openalex.org/W2809107162","https://openalex.org/W2907369926","https://openalex.org/W2912343591","https://openalex.org/W2926367029","https://openalex.org/W2934826843","https://openalex.org/W2949341542","https://openalex.org/W2963273426","https://openalex.org/W2963748489","https://openalex.org/W2971076825","https://openalex.org/W2976882027","https://openalex.org/W3002823324","https://openalex.org/W3006526650","https://openalex.org/W3022550689","https://openalex.org/W3025804100","https://openalex.org/W3100457262","https://openalex.org/W3100857292","https://openalex.org/W3122864121","https://openalex.org/W3214373139","https://openalex.org/W6674441132","https://openalex.org/W6729888666","https://openalex.org/W6760986300"],"related_works":["https://openalex.org/W2294483539","https://openalex.org/W2378449000","https://openalex.org/W3187581118","https://openalex.org/W2938399969","https://openalex.org/W2616994865","https://openalex.org/W3143747655","https://openalex.org/W2002178493","https://openalex.org/W2225089553","https://openalex.org/W4308273529","https://openalex.org/W2026621111"],"abstract_inverted_index":{"Identification":[0],"of":[1],"anomaly":[2],"and":[3,20,115,129,143,167,199,215],"malicious":[4,44,64,87,181],"traffic":[5,23,45,65,88,182],"in":[6,25,47,90,184],"the":[7,14,26,48,54,68,91,96,135,140,148,154,157,164,185,195],"Internet-of-Things":[8],"(IoT)":[9],"network":[10],"is":[11,79,102,113,127,132,213],"essential":[12],"for":[13,85,147,180],"IoT":[15,27,49,92,186],"security":[16],"to":[17,42,53,73,81,138,176],"keep":[18],"eyes":[19],"block":[21,43],"unwanted":[22],"flows":[24,46],"network.":[28,50,93,187],"For":[29],"this":[30],"purpose,":[31],"numerous":[32],"machine-learning":[33],"(ML)":[34],"technique":[35,137],"models":[36,60],"are":[37],"presented":[38],"by":[39,152,193],"many":[40],"researchers":[41],"However,":[51],"due":[52],"inappropriate":[55],"feature":[56,107,122],"selection,":[57],"several":[58],"ML":[59,150,202],"prone":[61],"misclassify":[62],"mostly":[63],"flows.":[66],"Nevertheless,":[67],"significant":[69],"problem":[70],"still":[71],"needs":[72],"be":[74],"studied":[75],"more":[76],"in-depth":[77],"that":[78,209],"how":[80],"select":[82,144],"effective":[83,145],"features":[84,141,146,179],"accurate":[86],"detection":[89],"To":[94],"address":[95],"problem,":[97],"a":[98,105,120,172],"new":[99,121],"framework":[100],"model":[101],"proposed.":[103],"First,":[104],"novel":[106],"selection":[108,123],"metric":[109],"approach":[110,192],"named":[111,125],"CorrAUC":[112,126],"proposed,":[114],"then":[116],"based":[117,133,170],"on":[118,134,171,220],"CorrAUC,":[119],"algorithm":[124,151],"developed":[128],"designed,":[130],"which":[131],"wrapper":[136],"filter":[139],"accurately":[142],"selected":[149,178],"using":[153,194],"area":[155],"under":[156],"curve":[158],"(AUC)":[159],"metric.":[160],"Then,":[161],"we":[162],"applied":[163],"integrated":[165],"TOPSIS":[166],"Shannon":[168],"entropy":[169],"bijective":[173],"soft":[174],"set":[175,198],"validate":[177],"identification":[183],"We":[188],"evaluate":[189],"our":[190,210],"proposed":[191,211],"Bot-IoT":[196],"data":[197],"four":[200],"different":[201],"algorithms.":[203],"The":[204],"experimental":[205],"results":[206,219],"analysis":[207],"showed":[208],"method":[212],"efficient":[214],"can":[216],"achieve":[217],">96%":[218],"average.":[221]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":73},{"year":2024,"cited_by_count":101},{"year":2023,"cited_by_count":141},{"year":2022,"cited_by_count":102},{"year":2021,"cited_by_count":85},{"year":2020,"cited_by_count":8}],"updated_date":"2026-04-13T07:58:08.660418","created_date":"2025-10-10T00:00:00"}