{"id":"https://openalex.org/W4387587680","doi":"https://doi.org/10.1109/jiot.2023.3324053","title":"MalBoT-DRL: Malware Botnet Detection Using Deep Reinforcement Learning in IoT Networks","display_name":"MalBoT-DRL: Malware Botnet Detection Using Deep Reinforcement Learning in IoT Networks","publication_year":2023,"publication_date":"2023-10-12","ids":{"openalex":"https://openalex.org/W4387587680","doi":"https://doi.org/10.1109/jiot.2023.3324053"},"language":"en","primary_location":{"id":"doi:10.1109/jiot.2023.3324053","is_oa":true,"landing_page_url":"https://doi.org/10.1109/jiot.2023.3324053","pdf_url":"https://ieeexplore.ieee.org/ielx7/6488907/6702522/10283893.pdf","source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://ieeexplore.ieee.org/ielx7/6488907/6702522/10283893.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102778422","display_name":"Mohammad Al-Fawa\u2019reh","orcid":"https://orcid.org/0000-0002-5621-4126"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mohammad Al-Fawa\u2019reh","raw_affiliation_strings":["School of Science, Edith Cowan University, Joondalup, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0002-5621-4126","affiliations":[{"raw_affiliation_string":"School of Science, Edith Cowan University, Joondalup, WA, Australia","institution_ids":["https://openalex.org/I12079687"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072706685","display_name":"Jumana Abu-Khalaf","orcid":"https://orcid.org/0000-0002-6651-2880"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jumana Abu-Khalaf","raw_affiliation_strings":["School of Science, Edith Cowan University, Joondalup, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0002-6651-2880","affiliations":[{"raw_affiliation_string":"School of Science, Edith Cowan University, Joondalup, WA, Australia","institution_ids":["https://openalex.org/I12079687"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059656651","display_name":"Patryk Szewczyk","orcid":"https://orcid.org/0000-0003-3040-9344"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Patryk Szewczyk","raw_affiliation_strings":["School of Science, Edith Cowan University, Joondalup, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0003-3040-9344","affiliations":[{"raw_affiliation_string":"School of Science, Edith Cowan University, Joondalup, WA, Australia","institution_ids":["https://openalex.org/I12079687"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088873861","display_name":"James Jin Kang","orcid":"https://orcid.org/0000-0002-0242-4187"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"James Jin Kang","raw_affiliation_strings":["School of Science, Edith Cowan University, Joondalup, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0002-0242-4187","affiliations":[{"raw_affiliation_string":"School of Science, Edith Cowan University, Joondalup, WA, Australia","institution_ids":["https://openalex.org/I12079687"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I12079687"],"apc_list":null,"apc_paid":null,"fwci":13.2229,"has_fulltext":true,"cited_by_count":100,"citation_normalized_percentile":{"value":0.99315547,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"11","issue":"6","first_page":"9610","last_page":"9629"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9617630243301392},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8797796964645386},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8298102021217346},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.7476787567138672},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6387102603912354},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6103686094284058},{"id":"https://openalex.org/keywords/generalizability-theory","display_name":"Generalizability theory","score":0.5815841555595398},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5367177128791809},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.49950170516967773},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48041820526123047},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.43651485443115234},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2967565655708313},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.10617110133171082}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9617630243301392},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8797796964645386},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8298102021217346},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.7476787567138672},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6387102603912354},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6103686094284058},{"id":"https://openalex.org/C27158222","wikidata":"https://www.wikidata.org/wiki/Q5532422","display_name":"Generalizability theory","level":2,"score":0.5815841555595398},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5367177128791809},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.49950170516967773},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48041820526123047},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.43651485443115234},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2967565655708313},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.10617110133171082},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/jiot.2023.3324053","is_oa":true,"landing_page_url":"https://doi.org/10.1109/jiot.2023.3324053","pdf_url":"https://ieeexplore.ieee.org/ielx7/6488907/6702522/10283893.pdf","source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},{"id":"pmh:oai:ro.ecu.edu.au:ecuworks2022-2026-4305","is_oa":true,"landing_page_url":"https://ro.ecu.edu.au/ecuworks2022-2026/3304","pdf_url":null,"source":{"id":"https://openalex.org/S2765015692","display_name":"Australasian Journal of Paramedicine","issn_l":"2202-7270","issn":["2202-7270"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research outputs 2022 to 2026","raw_type":"text"}],"best_oa_location":{"id":"doi:10.1109/jiot.2023.3324053","is_oa":true,"landing_page_url":"https://doi.org/10.1109/jiot.2023.3324053","pdf_url":"https://ieeexplore.ieee.org/ielx7/6488907/6702522/10283893.pdf","source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4387587680.pdf","grobid_xml":"https://content.openalex.org/works/W4387587680.grobid-xml"},"referenced_works_count":98,"referenced_works":["https://openalex.org/W41554520","https://openalex.org/W779494576","https://openalex.org/W2072726185","https://openalex.org/W2089554624","https://openalex.org/W2126311411","https://openalex.org/W2141005156","https://openalex.org/W2145339207","https://openalex.org/W2212381007","https://openalex.org/W2416799949","https://openalex.org/W2596585349","https://openalex.org/W2598123501","https://openalex.org/W2746553466","https://openalex.org/W2770550875","https://openalex.org/W2799758613","https://openalex.org/W2801118360","https://openalex.org/W2806741695","https://openalex.org/W2891512841","https://openalex.org/W2891660173","https://openalex.org/W2908736334","https://openalex.org/W2946127746","https://openalex.org/W2956839102","https://openalex.org/W2969926692","https://openalex.org/W2973442392","https://openalex.org/W2973862992","https://openalex.org/W2980055861","https://openalex.org/W2980686091","https://openalex.org/W2981856772","https://openalex.org/W2991722918","https://openalex.org/W2995789841","https://openalex.org/W3011545799","https://openalex.org/W3011591403","https://openalex.org/W3013100408","https://openalex.org/W3016207298","https://openalex.org/W3016757214","https://openalex.org/W3029946226","https://openalex.org/W3033324992","https://openalex.org/W3037958117","https://openalex.org/W3046697349","https://openalex.org/W3100789280","https://openalex.org/W3108669277","https://openalex.org/W3111563271","https://openalex.org/W3119422923","https://openalex.org/W3120086307","https://openalex.org/W3122864121","https://openalex.org/W3126389064","https://openalex.org/W3127943761","https://openalex.org/W3128098287","https://openalex.org/W3166939084","https://openalex.org/W3187104866","https://openalex.org/W3203228902","https://openalex.org/W3204183477","https://openalex.org/W3204486368","https://openalex.org/W3210900743","https://openalex.org/W3212619967","https://openalex.org/W3216826992","https://openalex.org/W4200206556","https://openalex.org/W4200336673","https://openalex.org/W4200477998","https://openalex.org/W4210702679","https://openalex.org/W4212962367","https://openalex.org/W4214699222","https://openalex.org/W4223941184","https://openalex.org/W4226432128","https://openalex.org/W4280565328","https://openalex.org/W4280575251","https://openalex.org/W4281263421","https://openalex.org/W4281920142","https://openalex.org/W4285586710","https://openalex.org/W4286373821","https://openalex.org/W4286506823","https://openalex.org/W4286891527","https://openalex.org/W4288740978","https://openalex.org/W4289641564","https://openalex.org/W4294663899","https://openalex.org/W4298857966","https://openalex.org/W4307190418","https://openalex.org/W4316039105","https://openalex.org/W4318815561","https://openalex.org/W4362496629","https://openalex.org/W4376142983","https://openalex.org/W4377024351","https://openalex.org/W4378189544","https://openalex.org/W4380930638","https://openalex.org/W4381568796","https://openalex.org/W4385695483","https://openalex.org/W4386373624","https://openalex.org/W6622487243","https://openalex.org/W6637967152","https://openalex.org/W6677067356","https://openalex.org/W6748171980","https://openalex.org/W6769357154","https://openalex.org/W6775058991","https://openalex.org/W6778590303","https://openalex.org/W6779265984","https://openalex.org/W6802864926","https://openalex.org/W6837815069","https://openalex.org/W6853340589","https://openalex.org/W7044016410"],"related_works":["https://openalex.org/W2294483539","https://openalex.org/W2378449000","https://openalex.org/W3187581118","https://openalex.org/W2938399969","https://openalex.org/W2616994865","https://openalex.org/W3143747655","https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4230824443","https://openalex.org/W2292210693"],"abstract_inverted_index":{"In":[0],"the":[1,71,90,173,208,216,226,231,238],"dynamic":[2],"landscape":[3],"of":[4,15,23,31,47,74,100,182,203,218,225,233,240],"cyber":[5],"threats,":[6],"multi-stage":[7],"malware":[8,75,117,175],"botnets":[9,127],"have":[10],"surfaced":[11],"as":[12,41,84],"significant":[13],"threats":[14,19],"concern.":[16],"These":[17],"sophisticated":[18],"can":[20],"exploit":[21],"Internet":[22],"Things":[24],"(IoT)":[25],"devices":[26],"to":[27,37,68,70,102,125,141,169,172,229],"undertake":[28],"an":[29,151],"array":[30],"cyberattacks,":[32],"ranging":[33],"from":[34],"basic":[35],"infections":[36],"complex":[38],"operations":[39],"such":[40],"phishing,":[42],"cryptojacking,":[43],"and":[44,65,106,136,195,205,210],"distributed":[45],"denial":[46],"service":[48],"(DDoS)":[49],"attacks.":[50,110],"Existing":[51],"machine":[52],"learning":[53,235],"solutions":[54],"are":[55],"often":[56],"constrained":[57],"by":[58],"their":[59,66,129],"limited":[60],"generalizability":[61,135,239],"across":[62],"various":[63],"datasets":[64],"inability":[67],"adapt":[69,171],"mutable":[72],"patterns":[73,105,176],"attacks":[76],"in":[77,163,198,207,236],"real":[78],"world":[79],"environments,":[80],"a":[81,115,138,155],"challenge":[82],"known":[83],"model":[85,142,145],"drift.":[86,143],"This":[87,111,144,165],"limitation":[88],"highlights":[89],"pressing":[91],"need":[92],"for":[93],"adaptive":[94],"Intrusion":[95],"Detection":[96],"Systems":[97],"(IDS),":[98],"capable":[99],"adjusting":[101],"evolving":[103],"threat":[104],"new":[107],"or":[108],"unseen":[109],"paper":[112],"introduces":[113,223],"MalBoT-DRL,":[114],"robust":[116],"botnet":[118],"detector":[119],"using":[120,190],"deep":[121],"reinforcement":[122,234],"learning.":[123],"Designed":[124],"detect":[126],"throughout":[128],"entire":[130],"lifecycle,":[131],"MalBoT-DRL":[132,168,183],"has":[133,158,184],"better":[134],"offers":[137],"resilient":[139],"solution":[140],"integrates":[146],"damped":[147],"incremental":[148],"statistics":[149],"with":[150],"attention":[152],"rewards":[153],"mechanism,":[154],"combination":[156],"that":[157],"not":[159],"been":[160,185],"extensively":[161],"explored":[162],"literature.":[164],"integration":[166],"enables":[167],"dynamically":[170],"ever-changing":[174],"within":[177],"IoT":[178],"environments.":[179],"The":[180],"performance":[181],"validated":[186],"via":[187],"trace-driven":[188],"experiments":[189],"two":[191],"representative":[192],"datasets,":[193],"MedBIoT":[194],"N-BaIoT,":[196],"resulting":[197],"exceptional":[199],"average":[200],"detection":[201,212],"rates":[202],"99.80%":[204],"99.40%":[206],"early":[209],"late":[211],"phases,":[213],"respectively.":[214],"To":[215],"best":[217],"our":[219],"knowledge,":[220],"this":[221],"work":[222],"one":[224],"first":[227],"studies":[228],"investigate":[230],"efficacy":[232],"enhancing":[237],"IDS.":[241]},"counts_by_year":[{"year":2026,"cited_by_count":17},{"year":2025,"cited_by_count":54},{"year":2024,"cited_by_count":28},{"year":2023,"cited_by_count":1}],"updated_date":"2026-08-08T01:25:22.217667","created_date":"2025-10-10T00:00:00"}