{"id":"https://openalex.org/W3046346562","doi":"https://doi.org/10.1145/3407023.3407053","title":"A comparison of stream mining algorithms on botnet detection","display_name":"A comparison of stream mining algorithms on botnet detection","publication_year":2020,"publication_date":"2020-07-30","ids":{"openalex":"https://openalex.org/W3046346562","doi":"https://doi.org/10.1145/3407023.3407053","mag":"3046346562"},"language":"en","primary_location":{"id":"doi:10.1145/3407023.3407053","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3407023.3407053","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109186523","display_name":"Guilherme Henrique Ribeiro","orcid":null},"institutions":[{"id":"https://openalex.org/I80850581","display_name":"Universidade Federal de Uberl\u00e2ndia","ror":"https://ror.org/04x3wvr31","country_code":"BR","type":"education","lineage":["https://openalex.org/I80850581"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Guilherme Henrique Ribeiro","raw_affiliation_strings":["Federal University of Uberl\u00e2ndia, Uberl\u00e2ndia, Minas Gerais, Brasil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Federal University of Uberl\u00e2ndia, Uberl\u00e2ndia, Minas Gerais, Brasil","institution_ids":["https://openalex.org/I80850581"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042178956","display_name":"Elaine R. Faria","orcid":"https://orcid.org/0000-0001-5242-9026"},"institutions":[{"id":"https://openalex.org/I80850581","display_name":"Universidade Federal de Uberl\u00e2ndia","ror":"https://ror.org/04x3wvr31","country_code":"BR","type":"education","lineage":["https://openalex.org/I80850581"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Elaine R. de Faria Paiva","raw_affiliation_strings":["Federal University of Uberl\u00e2ndia, Uberl\u00e2ndia, Minas Gerais, Brasil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Federal University of Uberl\u00e2ndia, Uberl\u00e2ndia, Minas Gerais, Brasil","institution_ids":["https://openalex.org/I80850581"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5066354978","display_name":"Rodrigo Sanches Miani","orcid":"https://orcid.org/0000-0002-8176-8040"},"institutions":[{"id":"https://openalex.org/I80850581","display_name":"Universidade Federal de Uberl\u00e2ndia","ror":"https://ror.org/04x3wvr31","country_code":"BR","type":"education","lineage":["https://openalex.org/I80850581"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Rodrigo Sanches Miani","raw_affiliation_strings":["Federal University of Uberl\u00e2ndia, Uberl\u00e2ndia, Minas Gerais, Brasil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Federal University of Uberl\u00e2ndia, Uberl\u00e2ndia, Minas Gerais, Brasil","institution_ids":["https://openalex.org/I80850581"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.1345,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.80297012,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.990761399269104},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8156787157058716},{"id":"https://openalex.org/keywords/cryptocurrency","display_name":"Cryptocurrency","score":0.5677552223205566},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.49358856678009033},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4414599537849426},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.35467666387557983},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.32613706588745117},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.32581984996795654},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.21667850017547607},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.09689849615097046}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.990761399269104},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8156787157058716},{"id":"https://openalex.org/C180706569","wikidata":"https://www.wikidata.org/wiki/Q13479982","display_name":"Cryptocurrency","level":2,"score":0.5677552223205566},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.49358856678009033},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4414599537849426},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.35467666387557983},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32613706588745117},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.32581984996795654},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.21667850017547607},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.09689849615097046}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3407023.3407053","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3407023.3407053","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6399999856948853}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1480772805","https://openalex.org/W1525647652","https://openalex.org/W1992713826","https://openalex.org/W2010657328","https://openalex.org/W2063816676","https://openalex.org/W2077488147","https://openalex.org/W2104692292","https://openalex.org/W2191989567","https://openalex.org/W2278926233","https://openalex.org/W2400267228","https://openalex.org/W2527763677","https://openalex.org/W2534494200","https://openalex.org/W2559738661","https://openalex.org/W2585528949","https://openalex.org/W2620580412","https://openalex.org/W2739052910","https://openalex.org/W2814294926","https://openalex.org/W2883062872","https://openalex.org/W2899235912","https://openalex.org/W3003253354","https://openalex.org/W3003389249","https://openalex.org/W4252506956"],"related_works":["https://openalex.org/W3106615352","https://openalex.org/W4385624493","https://openalex.org/W2980502996","https://openalex.org/W1989286518","https://openalex.org/W2621188356","https://openalex.org/W2313847479","https://openalex.org/W2942650110","https://openalex.org/W1975315982","https://openalex.org/W2784610426","https://openalex.org/W2182674428"],"abstract_inverted_index":{"Recent":[0],"botnet":[1,18,84,148],"activities":[2],"targeting":[3],"IoT":[4],"infrastructure":[5],"and":[6,21,77,146],"turning":[7],"computing":[8],"devices":[9],"into":[10],"cryptocurrency":[11],"miners":[12],"indicate":[13,124],"an":[14],"increase":[15],"in":[16],"the":[17,26,73,105,111,119,126,131,136],"attack":[19],"surface":[20],"capabilities.":[22],"These":[23],"facts":[24],"emphasize":[25],"importance":[27],"of":[28,36,75,90,107,113],"investigating":[29],"alternative":[30],"methods":[31],"for":[32],"detecting":[33],"botnets.":[34],"One":[35],"them":[37],"is":[38,70],"using":[39],"stream":[40,54,79],"mining":[41,55,80],"algorithms":[42,81,145],"to":[43,52,57,65,71,82,98,117],"classify":[44],"malicious":[45,91],"network":[46,85,92],"traffic.":[47],"Although":[48],"some":[49,147],"initiatives":[50],"seek":[51],"adopt":[53],"strategies":[56],"detect":[58],"botnets,":[59],"several":[60],"research":[61],"topics":[62],"still":[63],"need":[64],"be":[66,95],"discussed.":[67],"Our":[68,122],"goal":[69],"compare":[72],"use":[74,106],"single":[76],"ensemble-based":[78,127,144],"identify":[83],"flows.":[86],"Since":[87],"obtaining":[88],"examples":[89],"flows":[93],"could":[94,109],"a":[96],"hassle":[97],"security":[99],"managers,":[100],"we":[101],"also":[102,141],"investigate":[103],"whether":[104],"ensembles":[108],"reduce":[110],"number":[112],"labeled":[114,155],"instances":[115,156],"required":[116],"update":[118],"classification":[120],"model.":[121],"results":[123],"that":[125,143],"Ozaboost":[128],"algorithm":[129],"with":[130],"prequential":[132],"evaluation":[133],"strategy":[134],"outperforms":[135],"other":[137],"selected":[138],"algorithms.":[139],"We":[140],"found":[142],"characteristics":[149],"(C&C":[150],"communication":[151],"protocol)":[152],"requires":[153],"less":[154],"while":[157],"maintains":[158],"high":[159],"performance.":[160]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}