{"id":"https://openalex.org/W2099452399","doi":"https://doi.org/10.1109/pst.2011.5971980","title":"Detecting P2P botnets through network behavior analysis and machine learning","display_name":"Detecting P2P botnets through network behavior analysis and machine learning","publication_year":2011,"publication_date":"2011-07-01","ids":{"openalex":"https://openalex.org/W2099452399","doi":"https://doi.org/10.1109/pst.2011.5971980","mag":"2099452399"},"language":"en","primary_location":{"id":"doi:10.1109/pst.2011.5971980","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst.2011.5971980","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 Ninth Annual International Conference on Privacy, Security and Trust","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Sherif Saad","orcid":null},"institutions":[{"id":"https://openalex.org/I212119943","display_name":"University of Victoria","ror":"https://ror.org/04s5mat29","country_code":"CA","type":"education","lineage":["https://openalex.org/I212119943"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Sherif Saad","raw_affiliation_strings":["Electrical and Computer Engineering, University Of Victoria, Canada","Electrical & Computer Engineering, University of Victoria, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering, University Of Victoria, Canada","institution_ids":["https://openalex.org/I212119943"]},{"raw_affiliation_string":"Electrical & Computer Engineering, University of Victoria, Canada","institution_ids":["https://openalex.org/I212119943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041277719","display_name":"Issa Traor\u00e9","orcid":"https://orcid.org/0000-0003-2987-8047"},"institutions":[{"id":"https://openalex.org/I212119943","display_name":"University of Victoria","ror":"https://ror.org/04s5mat29","country_code":"CA","type":"education","lineage":["https://openalex.org/I212119943"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Issa Traore","raw_affiliation_strings":["Electrical and Computer Engineering, University Of Victoria, Canada","Electrical & Computer Engineering, University of Victoria, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering, University Of Victoria, Canada","institution_ids":["https://openalex.org/I212119943"]},{"raw_affiliation_string":"Electrical & Computer Engineering, University of Victoria, Canada","institution_ids":["https://openalex.org/I212119943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034685391","display_name":"Ali A. Ghorbani","orcid":"https://orcid.org/0000-0001-9189-6268"},"institutions":[{"id":"https://openalex.org/I106938459","display_name":"University of New Brunswick","ror":"https://ror.org/05nkf0n29","country_code":"CA","type":"education","lineage":["https://openalex.org/I106938459"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ali Ghorbani","raw_affiliation_strings":["University of New Brunswick, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New Brunswick, USA","institution_ids":["https://openalex.org/I106938459"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018172820","display_name":"Bassam Sayed","orcid":null},"institutions":[{"id":"https://openalex.org/I212119943","display_name":"University of Victoria","ror":"https://ror.org/04s5mat29","country_code":"CA","type":"education","lineage":["https://openalex.org/I212119943"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Bassam Sayed","raw_affiliation_strings":["Electrical and Computer Engineering, University Of Victoria, Canada","Electrical & Computer Engineering, University of Victoria, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering, University Of Victoria, Canada","institution_ids":["https://openalex.org/I212119943"]},{"raw_affiliation_string":"Electrical & Computer Engineering, University of Victoria, Canada","institution_ids":["https://openalex.org/I212119943"]}]},{"author_position":"middle","author":{"id":null,"display_name":"David Zhao","orcid":null},"institutions":[{"id":"https://openalex.org/I212119943","display_name":"University of Victoria","ror":"https://ror.org/04s5mat29","country_code":"CA","type":"education","lineage":["https://openalex.org/I212119943"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"David Zhao","raw_affiliation_strings":["Electrical and Computer Engineering, University Of Victoria, Canada","Electrical & Computer Engineering, University of Victoria, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering, University Of Victoria, Canada","institution_ids":["https://openalex.org/I212119943"]},{"raw_affiliation_string":"Electrical & Computer Engineering, University of Victoria, Canada","institution_ids":["https://openalex.org/I212119943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039346080","display_name":"Wei Lu","orcid":"https://orcid.org/0000-0002-4150-8674"},"institutions":[{"id":"https://openalex.org/I150638750","display_name":"Keene State College","ror":"https://ror.org/04c1gbz02","country_code":"US","type":"education","lineage":["https://openalex.org/I150638750"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wei Lu","raw_affiliation_strings":["Keene State College, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Keene State College, USA","institution_ids":["https://openalex.org/I150638750"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082967015","display_name":"J Villanueva Felix","orcid":null},"institutions":[{"id":"https://openalex.org/I106938459","display_name":"University of New Brunswick","ror":"https://ror.org/05nkf0n29","country_code":"CA","type":"education","lineage":["https://openalex.org/I106938459"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"John Felix","raw_affiliation_strings":["University of New Brunswick, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New Brunswick, USA","institution_ids":["https://openalex.org/I106938459"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5098329132","display_name":"P. Hakimian","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Payman Hakimian","raw_affiliation_strings":["RCMP Atlantic Region Integrated Technological Crime Unit Fredericton, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RCMP Atlantic Region Integrated Technological Crime Unit Fredericton, Canada","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.2923,"has_fulltext":false,"cited_by_count":271,"citation_normalized_percentile":{"value":0.97673496,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"174","last_page":"180"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.989607572555542},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7633633613586426},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6384353637695312},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5782762765884399},{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.575106143951416},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5097801089286804},{"id":"https://openalex.org/keywords/novelty","display_name":"Novelty","score":0.4947599768638611},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.45788657665252686},{"id":"https://openalex.org/keywords/command-and-control","display_name":"Command and control","score":0.4199036955833435},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.41077613830566406},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3976229429244995},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3578416407108307},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.14180737733840942}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.989607572555542},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7633633613586426},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6384353637695312},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5782762765884399},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.575106143951416},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5097801089286804},{"id":"https://openalex.org/C2778738651","wikidata":"https://www.wikidata.org/wiki/Q16546687","display_name":"Novelty","level":2,"score":0.4947599768638611},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.45788657665252686},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.4199036955833435},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.41077613830566406},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3976229429244995},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3578416407108307},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.14180737733840942},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C27206212","wikidata":"https://www.wikidata.org/wiki/Q34178","display_name":"Theology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/pst.2011.5971980","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst.2011.5971980","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 Ninth Annual International Conference on Privacy, Security and Trust","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7400000095367432,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W187875600","https://openalex.org/W191098608","https://openalex.org/W1504269120","https://openalex.org/W1543320899","https://openalex.org/W1760882240","https://openalex.org/W1775772884","https://openalex.org/W1873122431","https://openalex.org/W1909494783","https://openalex.org/W1977415353","https://openalex.org/W1977640460","https://openalex.org/W1992424850","https://openalex.org/W2002873370","https://openalex.org/W2094301398","https://openalex.org/W2095691935","https://openalex.org/W2110133608","https://openalex.org/W2128509737","https://openalex.org/W2155536216","https://openalex.org/W3082998439","https://openalex.org/W6607594771","https://openalex.org/W6632659584","https://openalex.org/W6637836093","https://openalex.org/W6638021444","https://openalex.org/W6639873220","https://openalex.org/W6651230344"],"related_works":["https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964","https://openalex.org/W4230824443","https://openalex.org/W2292210693","https://openalex.org/W86804927","https://openalex.org/W2898126008","https://openalex.org/W1583098994","https://openalex.org/W2386447999","https://openalex.org/W2130216882"],"abstract_inverted_index":{"Botnets":[0],"have":[1],"become":[2],"one":[3],"of":[4,86,94,117,152],"the":[5,9,62,80,92,135,153,159],"major":[6],"threats":[7],"on":[8,60,74,122],"Internet":[10],"for":[11,16,48],"serving":[12],"as":[13],"a":[14,45],"vector":[15],"carrying":[17],"attacks":[18,33,145],"against":[19],"organizations":[20],"and":[21,34,36,50,82,112,140],"committing":[22],"cybercrimes.":[23],"They":[24],"are":[25],"used":[26,98],"to":[27,102,130],"generate":[28],"spam,":[29],"carry":[30],"out":[31],"DDOS":[32],"click-fraud,":[35],"steal":[37],"sensitive":[38],"information.":[39],"In":[40],"this":[41,72],"paper,":[42],"we":[43],"propose":[44],"new":[46],"approach":[47,58],"characterizing":[49],"detecting":[51,61,75],"botnets":[52,87,133],"using":[53,146],"network":[54],"traffic":[55,147],"behaviors.":[56],"Our":[57],"focuses":[59],"bots":[63],"before":[64,141],"they":[65,142],"launch":[66,143],"their":[67,144],"attack.":[68],"We":[69,90],"focus":[70],"in":[71],"paper":[73],"P2P":[76],"bots,":[77],"which":[78],"represent":[79],"newest":[81],"most":[83],"challenging":[84],"types":[85],"currently":[88],"available.":[89],"study":[91],"ability":[93],"five":[95],"different":[96],"commonly":[97],"machine":[99],"learning":[100],"techniques":[101,155],"meet":[103],"online":[104],"botnet":[105,136],"detection":[106],"requirements,":[107],"namely":[108],"adaptability,":[109],"novelty":[110],"detection,":[111],"early":[113],"detection.":[114],"The":[115],"results":[116],"our":[118],"experimental":[119],"evaluation":[120],"based":[121],"existing":[123],"datasets":[124],"show":[125],"that":[126],"it":[127],"is":[128],"possible":[129],"detect":[131],"effectively":[132],"during":[134],"Command-and-Control":[137],"(C&C)":[138],"phase":[139],"behaviors":[148],"only.":[149],"However,":[150],"none":[151],"studied":[154],"can":[156],"address":[157],"all":[158],"above":[160],"requirements":[161],"at":[162],"once.":[163]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":20},{"year":2022,"cited_by_count":28},{"year":2021,"cited_by_count":24},{"year":2020,"cited_by_count":31},{"year":2019,"cited_by_count":29},{"year":2018,"cited_by_count":34},{"year":2017,"cited_by_count":26},{"year":2016,"cited_by_count":19},{"year":2015,"cited_by_count":18},{"year":2014,"cited_by_count":10},{"year":2013,"cited_by_count":8},{"year":2012,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}