{"id":"https://openalex.org/W7116788167","doi":"https://doi.org/10.23919/cnsm67658.2025.11297422","title":"Bot ahead! - Proactive Botnet Defense in ISP Networks using Digital Twins","display_name":"Bot ahead! - Proactive Botnet Defense in ISP Networks using Digital Twins","publication_year":2025,"publication_date":"2025-10-27","ids":{"openalex":"https://openalex.org/W7116788167","doi":"https://doi.org/10.23919/cnsm67658.2025.11297422"},"language":null,"primary_location":{"id":"doi:10.23919/cnsm67658.2025.11297422","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm67658.2025.11297422","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 21st International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120995597","display_name":"Christian Dietz","orcid":null},"institutions":[{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christian Dietz","raw_affiliation_strings":["Bundeswehr University Munich,Neubiberg,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bundeswehr University Munich,Neubiberg,Germany","institution_ids":["https://openalex.org/I40527276"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026700439","display_name":"Marcel Antzek","orcid":null},"institutions":[{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Marcel Antzek","raw_affiliation_strings":["Bundeswehr University Munich,Neubiberg,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bundeswehr University Munich,Neubiberg,Germany","institution_ids":["https://openalex.org/I40527276"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078551681","display_name":"Gabi Dreo Rodosek","orcid":"https://orcid.org/0000-0002-8702-8553"},"institutions":[{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Gabi Dreo Rodosek","raw_affiliation_strings":["Bundeswehr University Munich,Neubiberg,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bundeswehr University Munich,Neubiberg,Germany","institution_ids":["https://openalex.org/I40527276"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I40527276"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.52770968,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.61080002784729,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.61080002784729,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.2854999899864197,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.015699999406933784,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9743000268936157},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.5631999969482422},{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.5443000197410583},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4357999861240387},{"id":"https://openalex.org/keywords/network-topology","display_name":"Network topology","score":0.4284000098705292},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.4092999994754791},{"id":"https://openalex.org/keywords/overlay-network","display_name":"Overlay network","score":0.4074999988079071},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.38429999351501465}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9743000268936157},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6559000015258789},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6485000252723694},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.5631999969482422},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.5443000197410583},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.47040000557899475},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4357999861240387},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.4284000098705292},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.4092999994754791},{"id":"https://openalex.org/C169851745","wikidata":"https://www.wikidata.org/wiki/Q1331985","display_name":"Overlay network","level":3,"score":0.4074999988079071},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.38429999351501465},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.37619999051094055},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.35269999504089355},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.3440999984741211},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.3305000066757202},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3203999996185303},{"id":"https://openalex.org/C159631557","wikidata":"https://www.wikidata.org/wiki/Q1546066","display_name":"Networking hardware","level":2,"score":0.3066999912261963},{"id":"https://openalex.org/C151201525","wikidata":"https://www.wikidata.org/wiki/Q177239","display_name":"Limit (mathematics)","level":2,"score":0.28940001130104065},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.2888000011444092},{"id":"https://openalex.org/C522325796","wikidata":"https://www.wikidata.org/wiki/Q471880","display_name":"Identity theft","level":2,"score":0.28049999475479126},{"id":"https://openalex.org/C34947359","wikidata":"https://www.wikidata.org/wiki/Q665189","display_name":"Complex network","level":2,"score":0.27219998836517334},{"id":"https://openalex.org/C2779618445","wikidata":"https://www.wikidata.org/wiki/Q1640628","display_name":"Network service","level":2,"score":0.2711000144481659}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/cnsm67658.2025.11297422","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm67658.2025.11297422","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 21st International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.655992329120636,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W2043573545","https://openalex.org/W2171331105","https://openalex.org/W2278186031","https://openalex.org/W2318191508","https://openalex.org/W2460664618","https://openalex.org/W2483097313","https://openalex.org/W2493962252","https://openalex.org/W2607372450","https://openalex.org/W2733765803","https://openalex.org/W2907310707","https://openalex.org/W2971025946","https://openalex.org/W3005228016","https://openalex.org/W3029471862","https://openalex.org/W3158228679","https://openalex.org/W3213692590","https://openalex.org/W4214813493","https://openalex.org/W4244705237","https://openalex.org/W4282946853","https://openalex.org/W4292266154","https://openalex.org/W4308965813","https://openalex.org/W4312376363","https://openalex.org/W4380483109","https://openalex.org/W4383066068","https://openalex.org/W4385816160","https://openalex.org/W4390698010","https://openalex.org/W4398765408","https://openalex.org/W4399342147","https://openalex.org/W4403583637","https://openalex.org/W4406245425"],"related_works":[],"abstract_inverted_index":{"The":[0,44],"increasing":[1],"reliance":[2],"on":[3,122],"online":[4],"services":[5,21],"across":[6],"critical":[7,123],"sectors":[8],"(e.g.,":[9,36],"banking,":[10],"healthcare,":[11],"and":[12,41,53,61,73,80,90,117],"government)":[13],"makes":[14],"robust":[15],"network":[16,104,124],"infrastructures":[17],"paramount.":[18],"However,":[19],"these":[20,110],"are":[22],"frequently":[23],"targeted":[24],"by":[25],"malicious":[26],"actors":[27],"leveraging":[28],"distributed":[29],"overlay":[30],"networks":[31],"(botnets)":[32],"to":[33],"execute":[34],"attacks":[35,48],"data":[37],"theft,":[38],"service":[39],"disruption,":[40],"ransomware":[42],"campaigns).":[43],"impact":[45,121],"of":[46,55,64],"such":[47],"correlates":[49],"with":[50],"the":[51,56],"scale":[52],"capabilities":[54],"compromised":[57],"infrastructure.":[58],"Therefore,":[59],"early":[60],"proactive":[62,87],"detection":[63,89],"botnet":[65,88,115],"infections":[66],"is":[67],"crucial":[68],"for":[69,86],"limiting":[70],"their":[71,120],"growth":[72,116],"mitigating":[74],"potential":[75],"damage.":[76],"This":[77],"paper":[78],"presents":[79],"evaluates":[81],"a":[82,102],"Digital":[83],"Twin-based":[84],"approach":[85],"multi-level":[91],"mitigation":[92],"within":[93],"large-scale":[94],"networks,":[95],"particularly":[96],"ISP":[97],"infrastructures.":[98],"Through":[99],"simulations":[100],"using":[101],"dedicated":[103],"topology":[105],"framework,":[106],"we":[107],"demonstrate":[108],"how":[109],"strategies":[111],"can":[112],"effectively":[113],"limit":[114],"significantly":[118],"reduce":[119],"operations.":[125]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-12-22T00:00:00"}