{"id":"https://openalex.org/W2937274810","doi":"https://doi.org/10.1145/3314545.3314569","title":"Machine Learning Algorithms on Botnet Traffic","display_name":"Machine Learning Algorithms on Botnet Traffic","publication_year":2019,"publication_date":"2019-03-14","ids":{"openalex":"https://openalex.org/W2937274810","doi":"https://doi.org/10.1145/3314545.3314569","mag":"2937274810"},"language":"en","primary_location":{"id":"doi:10.1145/3314545.3314569","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3314545.3314569","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 3rd International Conference on Compute and Data Analysis","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033409609","display_name":"Robert M. McKay","orcid":"https://orcid.org/0000-0002-5602-6985"},"institutions":[{"id":"https://openalex.org/I53276908","display_name":"Marymount University","ror":"https://ror.org/0008kv292","country_code":"US","type":"education","lineage":["https://openalex.org/I53276908"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Rob McKay","raw_affiliation_strings":["Marymount University, School of Business and Technology, Arlington, VA"],"affiliations":[{"raw_affiliation_string":"Marymount University, School of Business and Technology, Arlington, VA","institution_ids":["https://openalex.org/I53276908"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074548347","display_name":"Brian Pendleton","orcid":null},"institutions":[{"id":"https://openalex.org/I53276908","display_name":"Marymount University","ror":"https://ror.org/0008kv292","country_code":"US","type":"education","lineage":["https://openalex.org/I53276908"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Brian Pendleton","raw_affiliation_strings":["Marymount University, School of Business and Technology, Arlington, VA"],"affiliations":[{"raw_affiliation_string":"Marymount University, School of Business and Technology, Arlington, VA","institution_ids":["https://openalex.org/I53276908"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034600951","display_name":"James Britt","orcid":null},"institutions":[{"id":"https://openalex.org/I53276908","display_name":"Marymount University","ror":"https://ror.org/0008kv292","country_code":"US","type":"education","lineage":["https://openalex.org/I53276908"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"James Britt","raw_affiliation_strings":["Marymount University, School of Business and Technology, Arlington, VA"],"affiliations":[{"raw_affiliation_string":"Marymount University, School of Business and Technology, Arlington, VA","institution_ids":["https://openalex.org/I53276908"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028394411","display_name":"Ben Nakhavanit","orcid":null},"institutions":[{"id":"https://openalex.org/I53276908","display_name":"Marymount University","ror":"https://ror.org/0008kv292","country_code":"US","type":"education","lineage":["https://openalex.org/I53276908"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ben Nakhavanit","raw_affiliation_strings":["Marymount University, School of Business and Technology, Arlington, VA"],"affiliations":[{"raw_affiliation_string":"Marymount University, School of Business and Technology, Arlington, VA","institution_ids":["https://openalex.org/I53276908"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5033409609"],"corresponding_institution_ids":["https://openalex.org/I53276908"],"apc_list":null,"apc_paid":null,"fwci":1.9454,"has_fulltext":false,"cited_by_count":25,"citation_normalized_percentile":{"value":0.87200983,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"31","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8217648267745972},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.7847405672073364},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7505515217781067},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.7492150068283081},{"id":"https://openalex.org/keywords/c4.5-algorithm","display_name":"C4.5 algorithm","score":0.7439841032028198},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6816408634185791},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.6585438251495361},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.5157933235168457},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4745365381240845},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.45133596658706665},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.4390729069709778},{"id":"https://openalex.org/keywords/statistical-classification","display_name":"Statistical classification","score":0.41660842299461365},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.2771908640861511},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.19106456637382507},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.17379003763198853},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.10059332847595215}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8217648267745972},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.7847405672073364},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7505515217781067},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.7492150068283081},{"id":"https://openalex.org/C52003472","wikidata":"https://www.wikidata.org/wiki/Q1022655","display_name":"C4.5 algorithm","level":4,"score":0.7439841032028198},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6816408634185791},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.6585438251495361},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.5157933235168457},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4745365381240845},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.45133596658706665},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.4390729069709778},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.41660842299461365},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.2771908640861511},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.19106456637382507},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.17379003763198853},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.10059332847595215},{"id":"https://openalex.org/C52001869","wikidata":"https://www.wikidata.org/wiki/Q812530","display_name":"Naive Bayes classifier","level":3,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3314545.3314569","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3314545.3314569","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 3rd International Conference on Compute and Data Analysis","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.4300000071525574}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W1547843648","https://openalex.org/W2080157505","https://openalex.org/W2278053035","https://openalex.org/W2785495041","https://openalex.org/W2789828921","https://openalex.org/W2799943651","https://openalex.org/W2800509541","https://openalex.org/W2802252153","https://openalex.org/W2802863387","https://openalex.org/W2803167497"],"related_works":["https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964","https://openalex.org/W1599449514","https://openalex.org/W2106647409","https://openalex.org/W2958312716","https://openalex.org/W744859113","https://openalex.org/W2887207835","https://openalex.org/W4282041905","https://openalex.org/W3001178684"],"abstract_inverted_index":{"The":[0,118,142,166],"authors":[1],"introduce":[2],"the":[3,57,79,96,179,183,193],"Bronte":[4],"machine":[5,64,115],"learning":[6,19,65,116],"evaluation":[7,32,103],"study":[8,54,104,119],"for":[9,16,82],"consistent":[10],"detection":[11],"of":[12,114],"malware,":[13],"specifically":[14],"honed":[15],"botnets.":[17],"Machine":[18],"algorithms":[20,66],"are":[21],"already":[22],"being":[23],"used":[24],"to":[25,61,67,72,106,163],"detect":[26],"malware":[27],"in":[28,147],"dynamic":[29],"environments.":[30],"This":[31,53,102],"utilizes":[33],"a":[34,112,151],"static":[35],"measurement":[36],"approach":[37],"that":[38,148],"could":[39],"be":[40],"implemented":[41],"on":[42],"edge":[43],"network":[44,51,58],"devices.":[45],"It":[46],"was":[47,120,150,160],"generated":[48],"from":[49],"conversation-based":[50],"traffic.":[52,165],"fully":[55],"enumerated":[56],"traffic":[59,157],"features":[60,110],"allow":[62],"various":[63,69,90],"build":[68],"training":[70,135,180],"sets":[71,136,144],"deploy":[73],"against":[74,95,196],"dual":[75],"test":[76,139,143,198],"sets.":[77,141,199],"Utilizing":[78],"Waikato":[80],"Environment":[81],"Knowledge":[83],"Analysis":[84],"(WEKA)":[85],"datamining":[86],"and":[87,98,123,137,158,171],"analysis":[88],"tool,":[89],"algorithmic":[91],"experiments":[92],"were":[93,145],"deployed":[94],"modern":[97],"large":[99],"CICIDS2017":[100],"dataset.":[101],"aimed":[105],"push":[107],"non-IP":[108],"address":[109],"through":[111],"series":[113],"classifiers.":[117],"conducted":[121],"differently":[122],"more":[124],"methodically":[125],"than":[126],"other":[127],"related":[128],"studies":[129],"by":[130],"using":[131,178],"three":[132],"highly":[133],"randomized":[134],"two":[138],"data":[140],"different":[146],"one":[149,159],"real":[152],"world":[153],"based":[154,168],"98.9":[155],"benign":[156,162],"50/50":[161],"bot":[164],"instance":[167],"nearest":[169],"neighbor":[170],"decision":[172,188],"tree":[173,189],"classifiers":[174],"ranked":[175],"highest":[176,194],"only":[177],"sets;":[181],"but":[182],"J48,":[184],"an":[185],"expanded":[186],"ID3":[187],"classifier,":[190],"clearly":[191],"produced":[192],"predictions":[195],"both":[197]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}