{"id":"https://openalex.org/W7134821334","doi":"https://doi.org/10.48550/arxiv.2603.06654","title":"How the Graph Construction Technique Shapes Performance in IoT Botnet Detection","display_name":"How the Graph Construction Technique Shapes Performance in IoT Botnet Detection","publication_year":2026,"publication_date":"2026-02-28","ids":{"openalex":"https://openalex.org/W7134821334","doi":"https://doi.org/10.48550/arxiv.2603.06654"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2603.06654","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074208436","display_name":"Hassan Wasswa","orcid":"https://orcid.org/0000-0002-6972-8935"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Wasswa, Hassan","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022974795","display_name":"Hussein A. Abbass","orcid":"https://orcid.org/0000-0002-8837-0748"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Abbass, Hussein","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5052257130","display_name":"Timothy Lynar","orcid":"https://orcid.org/0000-0001-7934-5658"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lynar, Timothy","raw_affiliation_strings":[],"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5074208436"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5932000279426575,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5932000279426575,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.0681999996304512,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.026599999517202377,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.8727999925613403},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.8034999966621399},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.7303000092506409},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.628000020980835},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.42419999837875366},{"id":"https://openalex.org/keywords/feature-vector","display_name":"Feature vector","score":0.3774000108242035},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3504999876022339},{"id":"https://openalex.org/keywords/graph-partition","display_name":"Graph partition","score":0.3239000141620636}],"concepts":[{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.8727999925613403},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.8034999966621399},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.73580002784729},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.7303000092506409},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.628000020980835},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5522000193595886},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4837000072002411},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.435699999332428},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.42419999837875366},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.3774000108242035},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3504999876022339},{"id":"https://openalex.org/C48903430","wikidata":"https://www.wikidata.org/wiki/Q491370","display_name":"Graph partition","level":3,"score":0.3239000141620636},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3183000087738037},{"id":"https://openalex.org/C113238511","wikidata":"https://www.wikidata.org/wiki/Q1071612","display_name":"k-nearest neighbors algorithm","level":2,"score":0.3176000118255615},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.3075999915599823},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.28839999437332153},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2766000032424927},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.2653999924659729},{"id":"https://openalex.org/C106937863","wikidata":"https://www.wikidata.org/wiki/Q7236518","display_name":"Power graph analysis","level":3,"score":0.26330000162124634}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2603.06654","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2603.06654","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.06654","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2603.06654","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0,146],"increasing":[1],"incidence":[2],"of":[3,58,70,161],"IoT-based":[4],"botnet":[5],"attacks":[6],"has":[7],"driven":[8],"interest":[9],"in":[10,89,135],"advanced":[11],"learning":[12],"models":[13],"for":[14,61],"detection.":[15],"Recent":[16],"efforts":[17],"have":[18],"focused":[19],"on":[20,129],"leveraging":[21],"attention":[22],"mechanisms":[23],"to":[24,34,107,118,132],"model":[25],"long-range":[26],"feature":[27],"dependencies":[28],"and":[29,85,144],"Graph":[30,123],"Neural":[31],"Networks":[32],"(GNNs)":[33],"capture":[35],"relationships":[36],"between":[37],"data":[38,47],"instances.":[39],"Since":[40],"GNNs":[41],"require":[42],"graph-structured":[43,64],"input,":[44],"tabular":[45],"NetFlow":[46],"must":[48],"be":[49],"transformed":[50],"accordingly.":[51],"This":[52],"study":[53],"evaluates":[54],"how":[55],"the":[56,59,63,67,94,109,136,154,166],"choice":[57],"method":[60],"constructing":[62],"dataset":[65,138],"impacts":[66],"classification":[68],"performance":[69,157,168],"a":[71,101,113,122],"GNN":[72],"model.":[73],"Five":[74],"methods--k-Nearest":[75],"Neighbors,":[76,79],"Mutual":[77],"Nearest":[78,81],"Shared":[80],"Neighbor,":[82],"Gabriel":[83,151],"Graph,":[84],"epsilon-radius":[86],"Graph--were":[87],"evaluated":[88],"this":[90],"research.":[91],"To":[92],"reduce":[93],"computational":[95],"burden":[96],"associated":[97],"with":[98,158,169],"high-dimensional":[99],"data,":[100],"Variational":[102],"Autoencoder":[103],"(VAE)":[104],"is":[105,127],"employed":[106],"project":[108],"original":[110],"features":[111],"into":[112,139],"lower-dimensional":[114],"latent":[115],"space":[116],"prior":[117],"graph":[119,131,152],"generation.":[120],"Subsequently,":[121],"Attention":[124],"Network":[125],"(GAT)":[126],"trained":[128],"each":[130],"classify":[133],"traffic":[134],"N-BaIoT":[137],"three":[140],"categories:":[141],"Normal,":[142],"Mirai,":[143],"Gafgyt.":[145],"results":[147],"indicate":[148],"that":[149],"using":[150],"achieves":[153],"highest":[155],"detection":[156],"an":[159,170],"accuracy":[160,171],"97.56%":[162],"while":[163],"SNN":[164],"recorded":[165],"lowest":[167],"as":[172,174],"low":[173],"78.56%.":[175]},"counts_by_year":[],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2026-03-11T00:00:00"}