IoT-POT: Machine Learning-based Detection of Mirai Botnet Attacks in IoT
Abstract
The Mirai botnet attack has become a serious threat to Internet of Things (IoT) devices because it can undermine network security by launching large-scale attacks by taking advantage of weaknesses. This paper uses the IoT-POT dataset, a vast collection of network traffic data collected by IoT honeypots, to suggest a machine learning (ML)-based method for detecting Mirai botnet infections. By utilizing supervised learning methods such as K-Nearest Neighbour (KNN), Logistics Regression (LR), Decision Tree (DT) and Random Forest (RF), create strong models that can recognize the harmful behaviour of Mirai botnet attacks. The IoT-POT dataset facilitates the creation of efficient detection algorithms by offering insightful information about the characteristics and conduct of Mirai attacks. Evaluate the models’ ability to correctly discriminate between legitimate and malicious IoT communications through a thorough testing and evaluation process. The results show how well ML works to identify Mirai botnet attacks and emphasize the value of preventative security strategies in securing IoT ecosystems from new online threats.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Subsequent Mirai variants and other IoT-botnet families continue to reproduce this pattern at scale.
“Subsequent Mirai variants and other IoT-botnet families continue to reproduce this pattern at scale”
From Agentic AI and Large Language Models for Autonomous IoT Cybersecurity: A Systematic Survey, Taxonomy, and Research Roadmap (2026) · cites this paper as [12]
Cites
Botnet Detection in the Internet of Things using Deep Learning Approaches
McDermott, C. D., Majdani, F., & Petrovski, A. V. (2018) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2018.8489489 · Cited by 380 · see citing works
Botnet attack detection in Internet of Things devices over cloud environment via machine learning
Waqas, M. M., Kumar, K., Laghari, A. A., Saeed, U., Rind, M. M., Shaikh, A. A., Hussain, F., Rai, A., & Qazi, A. Q. (2021) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.6662 · Cited by 113 · see citing works
Intelligent Detection of IoT Botnets Using Machine Learning and Deep Learning
Kim, J., Shim, M., Hong, S., Shin, Y., & Choi, E. (2020) · Applied Sciences · doi:10.3390/app10197009 · Cited by 106 · see citing works
SSH and FTP brute-force Attacks Detection in Computer Networks: LSTM and Machine Learning Approaches
Hossain, M. D., Ochiai, H., Fall, D., & Kadobayashi, Y. (2020) · International Conference on Computer and Communication Systems (ICCCS) · doi:10.1109/icccs49078.2020.9118459 · Cited by 59 · see citing works
Analysis of IoT Bots Against DDOS Attack Using Machine Learning Algorithm
Gurulakshmi, K., & Abraham, N. (2018) · International Conference on Trends in Electronics and Informatics (ICOEI) · doi:10.1109/icoei.2018.8553896 · Cited by 41 · see citing works
Vashisht, S., Sharma, B., & Lamba, S. (2023) · International Conference for Emerging Technology (INCET) · doi:10.1109/incet57972.2023.10170180 · Cited by 18 · see citing works
Mitigating DoS attacks in IoT using Supervised and Unsupervised Algorithms – A Survey
Gopal, S. B., Poongodi, C., Nanthiya, D., Priya, R. S., Saran, G., & Priya, M. S. (2021) · IOP Conference Series Materials Science and Engineering · doi:10.1088/1757-899x/1055/1/012072 · Cited by 16 · see citing works
Stratification of Eye Gaze using the Proposed Convolution Neural Network Model
Shourie, P., Sharma, A., Anand, V., & Gupta, S. (2023) · International Conference on Innovative Data Communication Technologies and Application (ICIDCA) · doi:10.1109/icidca56705.2023.10100102 · Cited by 14 · see citing works
Self-citationApprehending Mirai Botnet Philosophy and Smart Learning Models for IoT-DDoS Detection
Snehi, M., & Bhandari, A. (2021) · International Conference on Computing for Sustainable Global Development · doi:10.1109/indiacom51348.2021.00089 · Cited by 13 · see citing works
A Survey on the Role of Reverse Engineering in Security Attacks
Tanwar, V., & Ramkumar, K. R. (2023) · International Conference on Research Methodologies in Knowledge Management, Artificial Intelligence and Telecommunication Engineering (RMKMATE) · doi:10.1109/rmkmate59243.2023.10369068 · Cited by 11 · see citing works
Aldosari, W. (2023) · Sensors · doi:10.3390/s23239606 · Cited by 11 · see citing works
Detecting Botnet Attacks in IoT Healthcare Systems through IoT Technology
Sharma, A., & Babbar, H. (2023) · International Conference on Research Methodologies in Knowledge Management, Artificial Intelligence and Telecommunication Engineering (RMKMATE) · doi:10.1109/rmkmate59243.2023.10369476 · Cited by 7 · see citing works
Self-citationMethodology for Safeguarding Cloud Server from Web Application Attacks
Kumar, A., & Sharma, I. (2023) · International Conference on Research Methodologies in Knowledge Management, Artificial Intelligence and Telecommunication Engineering (RMKMATE) · doi:10.1109/rmkmate59243.2023.10369725 · Cited by 6 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Saeed, M. M. (2025) · IEEE Access · doi:10.1109/access.2025.3576506 · Cited by 36 · see citing works
Almadhor, A. S., Alsubai, S., Kryvinska, N., Hejaili, A. A., Ayari, M., Bouallègue, B., & Abbas, S. (2025) · Scientific Reports · doi:10.1038/s41598-025-21826-5 · Cited by 22 · see citing works
Nageshwaran, V., & Ezekiel, S. (2026) · Electronics · doi:10.3390/electronics15122740 · Cited by 4 · see citing works
An Adaptive Deep Learning-Based Intrusion Detection System for IoT Networks
Ansari, Q., Khatri, N., Rawat, H., Soni, P., & Prasad, M. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-18477-1_15
Mansouri, N., Mirtaheri, S. L., Asghari, S. A., & Pugliese, A. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-16165-9_28
Parameter Sensitivity of AADRNN-Based Attack Detection
Nasereddin, M., & Erol Gelenbe, A. (2026) · IEEE Symposium on Computers and Communications (ISCC) · doi:10.1109/iscc70364.2026.11740094
Vulnerability Analysis of Network Traffic based Mirai Detection Systems
Dutta, R. K., Chhetry, B., Matam, R., Barbhuiya, F. A., & Sairam, A. S. (2026) · International Conference on Information Networking · doi:10.1109/icoin68469.2026.11480589
A Stage-Wise, XAI-Driven Framework for Mirai Botnet Detection via Multi-Source Data Enrichment
Chhetry, B., Dutta, R. K., Matam, R., Barbhuiya, F. A., & Sairam, A. S. (2026) · International Conference on Information Networking · doi:10.1109/icoin68469.2026.11480603
Deployment-Aware Parameter Optimization for IoT Attack Detection
Nasereddin, M., & Erol Gelenbe, A. (2026) · IEEE International Conference on Smart Computing Workshops and Other Affiliated Events (SMARTCOMP Companion) · doi:10.1109/smartcomp-companion70724.2026.00023
Rajaram, K., Iswarya, S., Eshwari, M., Muthukumaran, M., & Krishnaraj, S. (2026) · International Conference on Modern Sustainable Systems (CMSS) · doi:10.1109/cmss69636.2026.11689143
Graph-Based Botnet Detection and Automated Network Defense Using GNN and SDN
Nandagiri, R. S., Rishith, S., Kadam, R. P., Begum, N., Harshitha, P., & Deepti, C. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-38809-4_23
- Authors
- Sharma, A., & Babbar, H.
- Affiliations
- Chitkara University (IN)
- Venue
- 2024 First International Conference on Innovations in Communications, Electrical and Computer Engineering (ICICEC)
- Publisher
- IEEE
- Published
- 2024-10-24
- Pages
- 1-6
- OpenAlex
- W4405909209
- Cited by
- 10
- References
- 13
- Citations by year
- 2026: 8 · 2025: 2
- FWCI
- 4.38
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- International Conference on Innovations in Communications, Electrical and Computer Engineering (ICICEC) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Artificial Intelligence › Internet Traffic Analysis and Secure E-voting
- Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
- Keywords
- Mirai botnet, botnet detection, Internet of Things security, network traffic analysis, malicious traffic classification, intrusion detection
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
