The DOI matches its Crossref record; 36 of the 37 references it cites were found in a registry or an index.
Intelligent Detection of IoT Botnets Using Machine Learning and Deep Learning
Open accessAbstract
As the number of Internet of Things (IoT) devices connected to the network rapidly increases, network attacks such as flooding and Denial of Service (DoS) are also increasing. These attacks cause network disruption and denial of service to IoT devices. However, a large number of heterogenous devices deployed in the IoT environment make it difficult to detect IoT attacks using traditional rule-based security solutions. It is challenging to develop optimal security models for each type of the device. Machine learning (ML) is an alternative technique that allows one to develop optimal security models based on empirical data from each device. We employ the ML technique for IoT attack detection. We focus on botnet attacks targeting various IoT devices and develop ML-based models for each type of device. We use the N-BaIoT dataset generated by injecting botnet attacks (Bashlite and Mirai) into various types of IoT devices, including a Doorbell, Baby Monitor, Security Camera, and Webcam. We develop a botnet detection model for each device using numerous ML models, including deep learning (DL) models. We then analyze the effective models with a high detection F1-score by carrying out multiclass classification, as well as binary classification, for each model.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“detectors that achieve >99% accuracy on a single dataset routinely lose 10-20 percentage points when transferred cross-dataset”
From Agentic AI and Large Language Models for Autonomous IoT Cybersecurity: A Systematic Survey, Taxonomy, and Research Roadmap (2026) · cites this paper as [15]
Citations
Cites
Lin, J., Yu, W., Zhang, N., Yang, X., Zhang, H., & Zhao, W. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2683200 · Cited by 2,793
That ‘Internet of Things’ Thing
Ashton, K. J. (1999) · Medical Entomology and Zoology · Cited by 2,581
DDoS in the IoT: Mirai and Other Botnets
Kolias, C., Kambourakis, G., Stavrou, A., & Voas, J. (2017) · Computer · doi:10.1109/mc.2017.201 · Cited by 1,892
N-BaIoT—Network-Based Detection of IoT Botnet Attacks Using Deep Autoencoders
Meidan, Y., Bohadana, M., Mathov, Y., Mirsky, Y., Shabtai, A., Breitenbacher, D., & Elovici, Y. (2018) · IEEE Pervasive Computing · doi:10.1109/mprv.2018.03367731 · Cited by 1,668
Deep Learning for IoT Big Data and Streaming Analytics: A Survey
Mohammadi, M., Al-Fuqaha, A., Sorour, S., & Guizani, M. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2844341 · Cited by 1,471
Internet of Things security: A survey
Alaba, F. A., Othman, M., Hashem, M., & Alotaibi, F. A. (2017) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2017.04.002 · Cited by 1,348
Machine Learning DDoS Detection for Consumer Internet of Things Devices
Doshi, R., Apthorpe, N., & Feamster, N. (2018) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2018.00013 · Cited by 920
Neshenko, N., Bou-Harb, E., Crichigno, J., Kaddoum, G., & Ghani, N. (2019) · IEEE Communications Surveys and Tutorials · doi:10.1109/comst.2019.2910750 · Cited by 723
Cyber Security and the Internet of Things: Vulnerabilities, Threats, Intruders and Attacks
Abomhara, M., & Køien, G. M. (2015) · Journal of Cyber Security and Mobility · doi:10.13052/jcsm2245-1439.414 · Cited by 718
Threat analysis of IoT networks using artificial neural network intrusion detection system
Hodo, E., Bellekens, X., Hamilton, A. W., Dubouilh, P.-L., Iorkyase, E. T., Tachtatzis, C., & Atkinson, R. C. (2016) · International Symposium on Networks, Computers and Communications (ISNCC) · doi:10.1109/isncc.2016.7746067 · Cited by 612
Flagged first, then by citations
1 of the 37 references couldn’t be matched to a known paper.
Research works printed but not linked: 9
- (2020, October 08). Available online: https://www.gartner.com/en/newsroom/press-releases/2019-08-29-gartner-says-5-8-billion-enterprise-and-automotive-io.
- Sonar, 2014, A survey: DDOS attack on internet of things, Int. J. Eng. Res. Dev., 10, 58
- Meidan, Y., Bohadana, M., Shabtai, A., Ochoa, M., Tippenhauer, N.O., Guarnizo, J.D., and Elovici, Y. (2017). Detection of unauthorized IoT devices using machine learning techniques. arXiv.
- Angrishi, K. (2017). Turning internet of things (iot) into internet of vulnerabilities (iov): Iot botnets. arXiv.
- Campus, 2018, Denial-of-service or flooding attack in IoT routing, Int. J. Pure Appl. Math., 118, 29
- Dash, 2018, Ransomware auto-detection in IoT devices using machine learning, Int. J. Eng. Sci., 8, 19538
- Al-Garadi, M.A., Mohamed, A., Al-Ali, A., Du, X., Ali, I., and Guizani, M. (2018). A Survey of machine and deep learning methods for internet of things (IoT) security. arXiv.
- Xie, X., Wu, D., Liu, S., and Li, R. (2017). IoT data analytics using deep learning. arXiv.
- Manos, A., April, T., Bailey, M., Bernhard, M., Bursztein, E., Cochran, J., Durumeric, Z., Halderman, J.A., Invernizzi, L., and Kallitsis, M. (2017, January 16–18). Understanding the mirai botnet. Proceedings of the 26th {USENIX} Security Symposium ({USENIX} Security 17), Vancouver, BC, Canada.
Cited by
Sorted by citations
Items 101–106 of 106
IoT PCAP Traffic Data Attack Analysis Using Ensemble Machine Learning
Frederico, R., Tasripin, F., Benedict, W., & Limawan, C. (2025) · Beyond Technology Summit on Informatics International Conference (BTS-I2C) · doi:10.1109/bts-i2c67944.2025.11399247
A scientometric exploration of threats to IoT security landscape
Charul, K. M., & Bhatia, M. (2026) · Cluster Computing · doi:10.1007/s10586-026-06137-2
A Comprehensive Review of ML-Techniques for Botnet Detection in IoT Environments
Khan, M. A., Chaudhary, A., & Singh, K. (2026) · International Conference on Innovations in Computational Intelligence (ICICI) · doi:10.1109/icici68867.2026.11565013
A Comprehensive Survey on Embedded Deep Learning Algorithms for Smart IoT Monitoring Systems
Alalwany, W. S. H., & Fahim, A. (2026) · Communications in computer and information science · doi:10.1007/978-3-032-25568-6_9
Rajaram, K., Iswarya, S., Eshwari, M., Muthukumaran, M., & Krishnaraj, S. (2026) · International Conference on Modern Sustainable Systems (CMSS) · doi:10.1109/cmss69636.2026.11689143
MM-IoTGuard: A Multi-Modality driven Framework for IoT Botnet Detection
Happy, Chhikara, R. R., & Kashyap, N. (2026) · International Conference on Innovation & Growth in Next-Gen Intelligent Technology & Engineering (IGNITE) · doi:10.1109/ignite69592.2026.11705783
Metadata
- Authors
- Kim, J., Shim, M., Hong, S., Shin, Y., & Choi, E.
- Affiliations
- Seoul Women's University (KR)
- Corresponding author
- Kim, Jiyeon
- Venue
- Applied Sciences
- Publisher
- MDPI AG
- Published
- 2020-10-08
- Volume
- 10
- Issue
- 19
- Pages
- 7009
- ISSN
- 2076-3417 (ISSN-L)
- OpenAlex
- W3092149785
- Cited by
- 106
- References
- 37
- Citations by year
- 2026: 11 · 2025: 23 · 2024: 26 · 2023: 29 · 2022: 10 · 2021: 7
- FWCI
- 5.40
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Licence
- Locations
- Applied Sciences (publishedVersion, cc-by)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- Funders
- National Research Foundation of Korea (NRF-2018R1D1A1B07050543)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
- Physical Sciences › Computer Science › Artificial Intelligence › Internet Traffic Analysis and Secure E-voting
- Keywords
- IoT botnets, botnet detection, Internet of Things security, Mirai, N-BaIoT dataset, multi-class classification, binary classification, denial-of-service attacks, smart home devices
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review