{"id":"https://openalex.org/W4225718750","doi":"https://doi.org/10.1109/tkde.2022.3157636","title":"IoT Botnet Detection Based on Anomalies of Multiscale Time Series Dynamics","display_name":"IoT Botnet Detection Based on Anomalies of Multiscale Time Series Dynamics","publication_year":2022,"publication_date":"2022-03-08","ids":{"openalex":"https://openalex.org/W4225718750","doi":"https://doi.org/10.1109/tkde.2022.3157636"},"language":"en","primary_location":{"id":"doi:10.1109/tkde.2022.3157636","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tkde.2022.3157636","pdf_url":null,"source":{"id":"https://openalex.org/S30698027","display_name":"IEEE Transactions on Knowledge and Data Engineering","issn_l":"1041-4347","issn":["1041-4347","1558-2191","2326-3865"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Knowledge and Data Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003192868","display_name":"Jo\u00e3o B. Borges","orcid":"https://orcid.org/0000-0001-6497-1613"},"institutions":[{"id":"https://openalex.org/I35046152","display_name":"Universidade Federal do Rio Grande do Norte","ror":"https://ror.org/04wn09761","country_code":"BR","type":"education","lineage":["https://openalex.org/I35046152"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Jo\u00e3o B. Borges","raw_affiliation_strings":["Department of Computing and Technology, Universidade Federal do Rio Grande do Norte, Caicó, RN, Brazil"],"raw_orcid":"https://orcid.org/0000-0001-6497-1613","affiliations":[{"raw_affiliation_string":"Department of Computing and Technology, Universidade Federal do Rio Grande do Norte, Caicó, RN, Brazil","institution_ids":["https://openalex.org/I35046152"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016043237","display_name":"Jo\u00e3o Paulo S. Medeiros","orcid":"https://orcid.org/0000-0002-5102-2707"},"institutions":[{"id":"https://openalex.org/I35046152","display_name":"Universidade Federal do Rio Grande do Norte","ror":"https://ror.org/04wn09761","country_code":"BR","type":"education","lineage":["https://openalex.org/I35046152"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Jo\u00e3o P. S. Medeiros","raw_affiliation_strings":["Department of Computing and Technology, Universidade Federal do Rio Grande do Norte, Caicó, RN, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-5102-2707","affiliations":[{"raw_affiliation_string":"Department of Computing and Technology, Universidade Federal do Rio Grande do Norte, Caicó, RN, Brazil","institution_ids":["https://openalex.org/I35046152"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027436809","display_name":"Luiz Paulo de Assis Barbosa","orcid":"https://orcid.org/0000-0001-5855-9884"},"institutions":[{"id":"https://openalex.org/I35046152","display_name":"Universidade Federal do Rio Grande do Norte","ror":"https://ror.org/04wn09761","country_code":"BR","type":"education","lineage":["https://openalex.org/I35046152"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Luiz P. A. Barbosa","raw_affiliation_strings":["Department of Computing and Technology, Universidade Federal do Rio Grande do Norte, Caicó, RN, Brazil"],"raw_orcid":"https://orcid.org/0000-0001-5855-9884","affiliations":[{"raw_affiliation_string":"Department of Computing and Technology, Universidade Federal do Rio Grande do Norte, Caicó, RN, Brazil","institution_ids":["https://openalex.org/I35046152"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053829615","display_name":"Heitor S. Ramos","orcid":"https://orcid.org/0000-0003-4523-6466"},"institutions":[{"id":"https://openalex.org/I110200422","display_name":"Universidade Federal de Minas Gerais","ror":"https://ror.org/0176yjw32","country_code":"BR","type":"education","lineage":["https://openalex.org/I110200422"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Heitor S. Ramos","raw_affiliation_strings":["Department of Computer Science, Universidade Federal de Minas Gerais, Belo Horizonte, MG, Brazil"],"raw_orcid":"https://orcid.org/0000-0003-4523-6466","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Universidade Federal de Minas Gerais, Belo Horizonte, MG, Brazil","institution_ids":["https://openalex.org/I110200422"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076640892","display_name":"Ant\u00f4nio A. F. Loureiro","orcid":"https://orcid.org/0000-0002-5250-1785"},"institutions":[{"id":"https://openalex.org/I110200422","display_name":"Universidade Federal de Minas Gerais","ror":"https://ror.org/0176yjw32","country_code":"BR","type":"education","lineage":["https://openalex.org/I110200422"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Antonio A. F. Loureiro","raw_affiliation_strings":["Department of Computer Science, Universidade Federal de Minas Gerais, Belo Horizonte, MG, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-5250-1785","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Universidade Federal de Minas Gerais, Belo Horizonte, MG, Brazil","institution_ids":["https://openalex.org/I110200422"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.5002,"has_fulltext":false,"cited_by_count":25,"citation_normalized_percentile":{"value":0.89012909,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"35","issue":"12","first_page":"12282","last_page":"12294"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12205","display_name":"Time Series Analysis and Forecasting","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9810405969619751},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8647599816322327},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7876240015029907},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6814792156219482},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.6172499656677246},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5113815665245056},{"id":"https://openalex.org/keywords/transformation","display_name":"Transformation (genetics)","score":0.49713948369026184},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3656550943851471},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.35368233919143677},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3475187420845032},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.33987343311309814},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.32951414585113525},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.32109731435775757}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9810405969619751},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8647599816322327},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7876240015029907},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6814792156219482},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6172499656677246},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5113815665245056},{"id":"https://openalex.org/C204241405","wikidata":"https://www.wikidata.org/wiki/Q461499","display_name":"Transformation (genetics)","level":3,"score":0.49713948369026184},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3656550943851471},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.35368233919143677},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3475187420845032},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.33987343311309814},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.32951414585113525},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.32109731435775757},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tkde.2022.3157636","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tkde.2022.3157636","pdf_url":null,"source":{"id":"https://openalex.org/S30698027","display_name":"IEEE Transactions on Knowledge and Data Engineering","issn_l":"1041-4347","issn":["1041-4347","1558-2191","2326-3865"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Knowledge and Data Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Life in Land","score":0.6000000238418579,"id":"https://metadata.un.org/sdg/15"}],"awards":[{"id":"https://openalex.org/G500379019","display_name":null,"funder_award_id":"2020/05121-4","funder_id":"https://openalex.org/F4320320997","funder_display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de S\u00e3o Paulo"},{"id":"https://openalex.org/G709604286","display_name":null,"funder_award_id":"#18/23064-8","funder_id":"https://openalex.org/F4320320997","funder_display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de S\u00e3o Paulo"},{"id":"https://openalex.org/G7349480107","display_name":"Communications and processing of big data in cloud and fog computing","funder_award_id":"15/24494-8","funder_id":"https://openalex.org/F4320320997","funder_display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de S\u00e3o Paulo"}],"funders":[{"id":"https://openalex.org/F4320320997","display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de S\u00e3o Paulo","ror":"https://ror.org/02ddkpn78"},{"id":"https://openalex.org/F4320321091","display_name":"Coordena\u00e7\u00e3o de Aperfei\u00e7oamento de Pessoal de N\u00edvel Superior","ror":"https://ror.org/00x0ma614"},{"id":"https://openalex.org/F4320322025","display_name":"Conselho Nacional de Desenvolvimento Cient\u00edfico e Tecnol\u00f3gico","ror":"https://ror.org/03swz6y49"},{"id":"https://openalex.org/F4320322980","display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de Minas Gerais","ror":"https://ror.org/00nc55f03"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W1533833275","https://openalex.org/W1871076392","https://openalex.org/W1978857479","https://openalex.org/W1995443851","https://openalex.org/W2000259494","https://openalex.org/W2007531476","https://openalex.org/W2008526819","https://openalex.org/W2014683958","https://openalex.org/W2021933315","https://openalex.org/W2030486754","https://openalex.org/W2048237976","https://openalex.org/W2058532765","https://openalex.org/W2061087382","https://openalex.org/W2073903565","https://openalex.org/W2092119928","https://openalex.org/W2105103777","https://openalex.org/W2111619626","https://openalex.org/W2122646361","https://openalex.org/W2141276899","https://openalex.org/W2142889610","https://openalex.org/W2155402574","https://openalex.org/W2253227230","https://openalex.org/W2271647922","https://openalex.org/W2296719434","https://openalex.org/W2485265736","https://openalex.org/W2499430103","https://openalex.org/W2511967697","https://openalex.org/W2582743722","https://openalex.org/W2586432806","https://openalex.org/W2615949771","https://openalex.org/W2733765803","https://openalex.org/W2742400585","https://openalex.org/W2799758613","https://openalex.org/W2899638272","https://openalex.org/W2899670782","https://openalex.org/W2908736334","https://openalex.org/W2953684278","https://openalex.org/W2961529324","https://openalex.org/W2963197901","https://openalex.org/W3020687048","https://openalex.org/W3033283979","https://openalex.org/W3040628207","https://openalex.org/W3040764028","https://openalex.org/W3095619744","https://openalex.org/W3101478121","https://openalex.org/W3104917574","https://openalex.org/W3119833890","https://openalex.org/W3122864121","https://openalex.org/W3132230013","https://openalex.org/W3185153723"],"related_works":["https://openalex.org/W2294483539","https://openalex.org/W2378449000","https://openalex.org/W2901835651","https://openalex.org/W2883616266","https://openalex.org/W4230824443","https://openalex.org/W2038807247","https://openalex.org/W2097156747","https://openalex.org/W2559738661","https://openalex.org/W2039821316","https://openalex.org/W2388081684"],"abstract_inverted_index":{"In":[0,42],"this":[1,43],"work,":[2],"we":[3,116],"propose":[4],"a":[5,47,65,95,99,150,169],"solution":[6,128],"for":[7,108,134,153,192],"detecting":[8,193],"botnet":[9],"attacks":[10,38],"on":[11],"the":[12,21,78,91,126,165,182],"Internet":[13],"of":[14,24,50,68,93,158,162,175],"Things":[15],"(IoT)":[16],"by":[17,64,81,167],"identifying":[18],"anomalies":[19,194],"in":[20,83,195],"temporal":[22],"dynamics":[23],"their":[25,28],"devices.":[26,70],"Given":[27],"limited":[29],"computing":[30],"capabilities,":[31],"IoT":[32,69,84,196],"devices":[33,114],"are":[34,54,62,85],"more":[35],"vulnerable":[36],"to":[37,56,74,129,188],"than":[39],"conventional":[40],"computers.":[41],"scenario,":[44],"botnets":[45,82,133],"have":[46],"high":[48],"degree":[49],"severity":[51],"since":[52],"they":[53],"used":[55],"trigging":[57],"distributed":[58],"denial-of-service":[59],"attacks,":[60],"which":[61],"amplified":[63],"large":[66],"number":[67,92],"Thus,":[71],"solutions":[72],"aiming":[73],"identify":[75],"and":[76,87,104,121,137,160,164],"mitigate":[77],"damage":[79],"caused":[80],"urgent":[86],"essential.":[88],"We":[89,124,139],"evaluate":[90],"packets":[94],"device":[96],"transmits,":[97],"following":[98],"multiscale":[100],"ordinal":[101],"patterns":[102],"transformation,":[103,184],"use":[105,189],"Isolation":[106],"Forest":[107],"anomaly":[109],"detection.":[110],"By":[111],"investigating":[112],"how":[113],"evolve,":[115],"can":[117],"distinguish":[118],"between":[119],"normal":[120],"anomalous":[122],"behaviors.":[123,198],"apply":[125],"proposed":[127],"detect":[130],"two":[131,144],"major":[132],"IoT:":[135],"Mirai":[136],"Bashlite.":[138],"evaluated":[140],"our":[141],"model":[142,152,170],"throughout":[143],"experimental":[145],"setups.":[146],"The":[147],"first,":[148],"using":[149],"single":[151],"all":[154],"devices,":[155],"reaching":[156,173],"99.5%":[157],"accuracy":[159],"99.6%":[161],"specificity,":[163],"second,":[166],"tuning":[168],"per":[171],"device,":[172],"100%":[174],"accuracy.":[176],"These":[177],"results":[178],"show":[179],"that,":[180],"with":[181],"proper":[183],"it":[185],"is":[186],"possible":[187],"simple":[190],"methods":[191],"devices\u2019":[197]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":3}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}