{"id":"https://openalex.org/W4399049786","doi":"https://doi.org/10.1186/s13635-024-00169-0","title":"Peer-to-peer botnets: exploring behavioural characteristics and machine/deep learning-based detection","display_name":"Peer-to-peer botnets: exploring behavioural characteristics and machine/deep learning-based detection","publication_year":2024,"publication_date":"2024-05-27","ids":{"openalex":"https://openalex.org/W4399049786","doi":"https://doi.org/10.1186/s13635-024-00169-0"},"language":"en","primary_location":{"id":"doi:10.1186/s13635-024-00169-0","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-024-00169-0","pdf_url":"https://jis-eurasipjournals.springeropen.com/counter/pdf/10.1186/s13635-024-00169-0","source":{"id":"https://openalex.org/S5820498","display_name":"EURASIP Journal on Information Security","issn_l":"1687-4161","issn":["1687-4161","1687-417X","2510-523X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EURASIP Journal on Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://jis-eurasipjournals.springeropen.com/counter/pdf/10.1186/s13635-024-00169-0","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089775099","display_name":"Arkan Hammoodi Hasan Kabla","orcid":"https://orcid.org/0000-0002-9550-832X"},"institutions":[{"id":"https://openalex.org/I139322472","display_name":"Universiti Sains Malaysia","ror":"https://ror.org/02rgb2k63","country_code":"MY","type":"education","lineage":["https://openalex.org/I139322472"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Arkan Hammoodi Hasan Kabla","raw_affiliation_strings":["National Advanced IPv6 Centre, Universiti Sains Malaysia, 11800, Penang, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Advanced IPv6 Centre, Universiti Sains Malaysia, 11800, Penang, Malaysia","institution_ids":["https://openalex.org/I139322472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113548697","display_name":"Achmad Husni Thamrin","orcid":null},"institutions":[{"id":"https://openalex.org/I4210141715","display_name":"Keio University Shonan Fujisawa","ror":"https://ror.org/047khpn70","country_code":"JP","type":"education","lineage":["https://openalex.org/I4210141715"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Achmad Husni Thamrin","raw_affiliation_strings":["Graduate School of Media and Governance, Keio University, Fujisawa, Kanagawa, 252-0882, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of Media and Governance, Keio University, Fujisawa, Kanagawa, 252-0882, Japan","institution_ids":["https://openalex.org/I4210141715"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015229013","display_name":"Mohammed Anbar","orcid":"https://orcid.org/0000-0002-7026-6408"},"institutions":[{"id":"https://openalex.org/I139322472","display_name":"Universiti Sains Malaysia","ror":"https://ror.org/02rgb2k63","country_code":"MY","type":"education","lineage":["https://openalex.org/I139322472"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Mohammed Anbar","raw_affiliation_strings":["National Advanced IPv6 Centre, Universiti Sains Malaysia, 11800, Penang, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Advanced IPv6 Centre, Universiti Sains Malaysia, 11800, Penang, Malaysia","institution_ids":["https://openalex.org/I139322472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042044177","display_name":"Selvakumar Manickam","orcid":null},"institutions":[{"id":"https://openalex.org/I139322472","display_name":"Universiti Sains Malaysia","ror":"https://ror.org/02rgb2k63","country_code":"MY","type":"education","lineage":["https://openalex.org/I139322472"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Selvakumar Manickam","raw_affiliation_strings":["National Advanced IPv6 Centre, Universiti Sains Malaysia, 11800, Penang, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Advanced IPv6 Centre, Universiti Sains Malaysia, 11800, Penang, Malaysia","institution_ids":["https://openalex.org/I139322472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054341757","display_name":"Shankar Karuppayah","orcid":"https://orcid.org/0000-0003-4801-6370"},"institutions":[{"id":"https://openalex.org/I139322472","display_name":"Universiti Sains Malaysia","ror":"https://ror.org/02rgb2k63","country_code":"MY","type":"education","lineage":["https://openalex.org/I139322472"]}],"countries":["MY"],"is_corresponding":true,"raw_author_name":"Shankar Karuppayah","raw_affiliation_strings":["National Advanced IPv6 Centre, Universiti Sains Malaysia, 11800, Penang, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Advanced IPv6 Centre, Universiti Sains Malaysia, 11800, Penang, Malaysia","institution_ids":["https://openalex.org/I139322472"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5054341757"],"corresponding_institution_ids":["https://openalex.org/I139322472"],"apc_list":{"value":1040,"currency":"USD","value_usd":1040},"apc_paid":{"value":1040,"currency":"USD","value_usd":1040},"fwci":1.9312,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.85695472,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"2024","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.8433547616004944},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8202652335166931},{"id":"https://openalex.org/keywords/peer-to-peer","display_name":"Peer-to-peer","score":0.7018460035324097},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47869113087654114},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.45203155279159546},{"id":"https://openalex.org/keywords/peer-review","display_name":"Peer review","score":0.431831032037735},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.37997183203697205},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.37394416332244873},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.34779319167137146},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.311353862285614},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.18648090958595276}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.8433547616004944},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8202652335166931},{"id":"https://openalex.org/C534932454","wikidata":"https://www.wikidata.org/wiki/Q161410","display_name":"Peer-to-peer","level":2,"score":0.7018460035324097},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47869113087654114},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45203155279159546},{"id":"https://openalex.org/C138368954","wikidata":"https://www.wikidata.org/wiki/Q215028","display_name":"Peer review","level":2,"score":0.431831032037735},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37997183203697205},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.37394416332244873},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.34779319167137146},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.311353862285614},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.18648090958595276},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s13635-024-00169-0","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-024-00169-0","pdf_url":"https://jis-eurasipjournals.springeropen.com/counter/pdf/10.1186/s13635-024-00169-0","source":{"id":"https://openalex.org/S5820498","display_name":"EURASIP Journal on Information Security","issn_l":"1687-4161","issn":["1687-4161","1687-417X","2510-523X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EURASIP Journal on Information Security","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:ea0e88f6a8cb4f4fa27ec2552f14d5d8","is_oa":true,"landing_page_url":"https://doaj.org/article/ea0e88f6a8cb4f4fa27ec2552f14d5d8","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"EURASIP Journal on Information Security, Vol 2024, Iss 1, Pp 1-19 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s13635-024-00169-0","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-024-00169-0","pdf_url":"https://jis-eurasipjournals.springeropen.com/counter/pdf/10.1186/s13635-024-00169-0","source":{"id":"https://openalex.org/S5820498","display_name":"EURASIP Journal on Information Security","issn_l":"1687-4161","issn":["1687-4161","1687-417X","2510-523X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EURASIP Journal on Information Security","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.44999998807907104}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4399049786.pdf"},"referenced_works_count":55,"referenced_works":["https://openalex.org/W8726526","https://openalex.org/W1152223117","https://openalex.org/W1508164098","https://openalex.org/W1847242080","https://openalex.org/W1909494783","https://openalex.org/W1964267679","https://openalex.org/W1972629404","https://openalex.org/W1995212772","https://openalex.org/W2022351160","https://openalex.org/W2027585446","https://openalex.org/W2028290064","https://openalex.org/W2059001009","https://openalex.org/W2069620139","https://openalex.org/W2083112034","https://openalex.org/W2085313531","https://openalex.org/W2097101695","https://openalex.org/W2099452399","https://openalex.org/W2126887125","https://openalex.org/W2135266783","https://openalex.org/W2141442981","https://openalex.org/W2141608288","https://openalex.org/W2244771014","https://openalex.org/W2322520855","https://openalex.org/W2483514471","https://openalex.org/W2527763677","https://openalex.org/W2544866080","https://openalex.org/W2740202648","https://openalex.org/W2788194436","https://openalex.org/W2892991261","https://openalex.org/W2894022514","https://openalex.org/W2919470885","https://openalex.org/W2996344571","https://openalex.org/W2999870577","https://openalex.org/W3040779813","https://openalex.org/W3043790215","https://openalex.org/W3048668222","https://openalex.org/W3104735167","https://openalex.org/W3210846950","https://openalex.org/W4225146420","https://openalex.org/W4226445259","https://openalex.org/W4243072198","https://openalex.org/W4243716988","https://openalex.org/W4281791247","https://openalex.org/W4285291568","https://openalex.org/W4285812981","https://openalex.org/W4286521379","https://openalex.org/W4309349407","https://openalex.org/W4309848187","https://openalex.org/W4312961006","https://openalex.org/W4361989948","https://openalex.org/W4381803233","https://openalex.org/W4386168447","https://openalex.org/W4390744081","https://openalex.org/W4391128590","https://openalex.org/W4393684358"],"related_works":["https://openalex.org/W2119207053","https://openalex.org/W2062822216","https://openalex.org/W4388937261","https://openalex.org/W3168910912","https://openalex.org/W2080162505","https://openalex.org/W154757022","https://openalex.org/W2951743068","https://openalex.org/W4245517956","https://openalex.org/W2783918606","https://openalex.org/W3194979224"],"abstract_inverted_index":{"Abstract":[0,201],"The":[1,164],"orientation":[2],"of":[3,18,32,110,194],"emerging":[4],"technologies":[5],"on":[6,114],"the":[7,19,29,43,52,65,69,89,157,182,186],"Internet":[8,23],"is":[9,59],"moving":[10],"toward":[11],"decentralisation.":[12],"Botnets":[13],"have":[14,27,55,146],"always":[15],"been":[16,149],"one":[17],"biggest":[20],"threats":[21],"to":[22,34,84,100,123,151,177],"security,":[24],"and":[25,36,46,130,142,169],"botmasters":[26],"adopted":[28],"robust":[30],"concept":[31],"decentralisation":[33],"develop":[35],"improve":[37],"peer-to-peer":[38,86,102,153,179],"botnet":[39,54],"tactics.":[40],"This":[41],"makes":[42,61],"botnets":[44,154],"cleverer":[45],"more":[47,124],"artful,":[48],"although":[49],"bots":[50],"under":[51],"same":[53],"symmetrical":[56],"behaviour,":[57],"which":[58],"what":[60],"them":[62],"detectable.":[63],"However,":[64],"literature":[66],"indicates":[67],"that":[68,75,80,119,145,173],"last":[70],"decade":[71],"has":[72],"lacked":[73],"research":[74],"explores":[76],"new":[77,97,108,135,168],"behavioural":[78,111,171],"characteristics":[79,112,172],"could":[81],"be":[82,175],"used":[83,176],"identify":[85,178],"botnets.":[87],"For":[88],"abovementioned":[90],"reasons,":[91],"in":[92],"this":[93],"study,":[94],"we":[95,105,132],"propose":[96],"two":[98],"methods":[99],"detect":[101,152],"botnets:":[103],"first,":[104],"explored":[106],"a":[107,127,134,190],"set":[109],"based":[113],"network":[115,121],"traffic":[116],"flow":[117],"analyses":[118,166],"allow":[120],"administrators":[122],"easily":[125],"recognise":[126],"botnet\u2019s":[128],"presence,":[129],"second,":[131],"developed":[133],"anomaly":[136],"detection":[137,187,192],"approach":[138,188],"by":[139],"adopting":[140],"machine-learning":[141],"deep-learning":[143],"techniques":[144],"not":[147],"yet":[148],"leveraged":[150],"using":[155],"only":[156],"five-tuple":[158],"static":[159],"indicators":[160],"as":[161],"selected":[162],"features.":[163],"experimental":[165,183],"revealed":[167],"important":[170],"can":[174],"botnets,":[180],"whereas":[181],"results":[184],"for":[185],"showed":[189],"high":[191],"accuracy":[193],"99.99%":[195],"with":[196],"no":[197],"false":[198],"alarms.":[199],"Graphical":[200]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":7}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}