The DOI matches its Crossref record; 36 of the 37 references it cites were found in a registry or an index.
Intelligent Detection of IoT Botnets Using Machine Learning and Deep Learning
Open accessAbstract
As the number of Internet of Things (IoT) devices connected to the network rapidly increases, network attacks such as flooding and Denial of Service (DoS) are also increasing. These attacks cause network disruption and denial of service to IoT devices. However, a large number of heterogenous devices deployed in the IoT environment make it difficult to detect IoT attacks using traditional rule-based security solutions. It is challenging to develop optimal security models for each type of the device. Machine learning (ML) is an alternative technique that allows one to develop optimal security models based on empirical data from each device. We employ the ML technique for IoT attack detection. We focus on botnet attacks targeting various IoT devices and develop ML-based models for each type of device. We use the N-BaIoT dataset generated by injecting botnet attacks (Bashlite and Mirai) into various types of IoT devices, including a Doorbell, Baby Monitor, Security Camera, and Webcam. We develop a botnet detection model for each device using numerous ML models, including deep learning (DL) models. We then analyze the effective models with a high detection F1-score by carrying out multiclass classification, as well as binary classification, for each model.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“detectors that achieve >99% accuracy on a single dataset routinely lose 10-20 percentage points when transferred cross-dataset”
From Agentic AI and Large Language Models for Autonomous IoT Cybersecurity: A Systematic Survey, Taxonomy, and Research Roadmap (2026) · cites this paper as [15]
Citations
Cites
Lin, J., Yu, W., Zhang, N., Yang, X., Zhang, H., & Zhao, W. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2683200 · Cited by 2,793
That ‘Internet of Things’ Thing
Ashton, K. J. (1999) · Medical Entomology and Zoology · Cited by 2,581
DDoS in the IoT: Mirai and Other Botnets
Kolias, C., Kambourakis, G., Stavrou, A., & Voas, J. (2017) · Computer · doi:10.1109/mc.2017.201 · Cited by 1,892
N-BaIoT—Network-Based Detection of IoT Botnet Attacks Using Deep Autoencoders
Meidan, Y., Bohadana, M., Mathov, Y., Mirsky, Y., Shabtai, A., Breitenbacher, D., & Elovici, Y. (2018) · IEEE Pervasive Computing · doi:10.1109/mprv.2018.03367731 · Cited by 1,668
Deep Learning for IoT Big Data and Streaming Analytics: A Survey
Mohammadi, M., Al-Fuqaha, A., Sorour, S., & Guizani, M. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2844341 · Cited by 1,471
Internet of Things security: A survey
Alaba, F. A., Othman, M., Hashem, M., & Alotaibi, F. A. (2017) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2017.04.002 · Cited by 1,348
Machine Learning DDoS Detection for Consumer Internet of Things Devices
Doshi, R., Apthorpe, N., & Feamster, N. (2018) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2018.00013 · Cited by 920
Neshenko, N., Bou-Harb, E., Crichigno, J., Kaddoum, G., & Ghani, N. (2019) · IEEE Communications Surveys and Tutorials · doi:10.1109/comst.2019.2910750 · Cited by 723
Cyber Security and the Internet of Things: Vulnerabilities, Threats, Intruders and Attacks
Abomhara, M., & Køien, G. M. (2015) · Journal of Cyber Security and Mobility · doi:10.13052/jcsm2245-1439.414 · Cited by 718
Threat analysis of IoT networks using artificial neural network intrusion detection system
Hodo, E., Bellekens, X., Hamilton, A. W., Dubouilh, P.-L., Iorkyase, E. T., Tachtatzis, C., & Atkinson, R. C. (2016) · International Symposium on Networks, Computers and Communications (ISNCC) · doi:10.1109/isncc.2016.7746067 · Cited by 612
Internet of Things: Security vulnerabilities and challenges
Andrea, I., Chrysostomou, C., & Hadjichristofi, G. (2015) · 2015 IEEE Symposium on Computers and Communication (ISCC) · doi:10.1109/iscc.2015.7405513 · Cited by 520
Routing Attacks and Countermeasures in the RPL-Based Internet of Things
Wallgren, L., Raza, S., & Voigt, T. (2013) · International Journal of Distributed Sensor Networks · doi:10.1155/2013/794326 · Cited by 483
Security attacks in IoT: A survey
Deogirikar, J., & Vidhate, A. V. (2017) · International Conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud) (I-SMAC) · doi:10.1109/i-smac.2017.8058363 · Cited by 470
A deep Recurrent Neural Network based approach for Internet of Things malware threat hunting
HaddadPajouh, H., Dehghantanha, A., Khayami, R., & Choo, K. R. (2018) · Future Generation Computer Systems · doi:10.1016/j.future.2018.03.007 · Cited by 466
Meidan, Y., Bohadana, M., Shabtai, A., Guarnizo, J., Ochoa, M., Tippenhauer, N. O., & Elovici, Y. (2017) · ACM Symposium on Applied Computing · doi:10.1145/3019612.3019878 · Cited by 424
Botnet Detection in the Internet of Things using Deep Learning Approaches
McDermott, C. D., Majdani, F., & Petrovski, A. V. (2018) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn.2018.8489489 · Cited by 380
Network-level security and privacy control for smart-home IoT devices
Sivaraman, V., Gharakheili, H. H., Vishwanath, A., Boreli, R., & Mehani, O. (2015) · IEEE International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob) · doi:10.1109/wimob.2015.7347956 · Cited by 301
Detecting crypto-ransomware in IoT networks based on energy consumption footprint
Azmoodeh, A., Dehghantanha, A., Conti, M., & Choo, K. R. (2017) · Journal of Ambient Intelligence and Humanized Computing · doi:10.1007/s12652-017-0558-5 · Cited by 295
Shorman, A. R., Faris, H., & Aljarah, I. (2019) · Journal of Ambient Intelligence and Humanized Computing · doi:10.1007/s12652-019-01387-y · Cited by 229
Extended Functionality Attacks on IoT Devices: The Case of Smart Lights
Ronen, E., & Shamir, A. (2016) · European Symposium on Security and Privacy · doi:10.1109/eurosp.2016.13 · Cited by 218
The Evolution of Bashlite and Mirai IoT Botnets
Marzano, A., Alexander, D., Fonseca, O., Fazzion, E. C., Hoepers, C., Steding-Jessen, K., Chaves, M. H. P. C., Cunha, Í. F. S., Guedes, D. O., & Meira, W. (2018) · IEEE Symposium on Computers and Communications (ISCC) · doi:10.1109/iscc.2018.8538636 · Cited by 191
Analysis of Eight Data Mining Algorithms for Smarter Internet of Things (IoT)
Alam, F., Mehmood, R., Katib, I. A., & Albeshri, A. A. (2016) · Procedia Computer Science · doi:10.1016/j.procs.2016.09.068 · Cited by 180
Deep Learning for Detection of Routing Attacks in the Internet of Things
Yavuz, F. Y., Ünal, D., & Gül, E. (2018) · International Journal of Computational Intelligence Systems · doi:10.2991/ijcis.2018.25905181 · Cited by 172
Securing SDN Infrastructure of IoT–Fog Networks From MitM Attacks
Li, C., Qin, Z., Novak, E., & Li, Q. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2685596 · Cited by 149
Brun, O., Yin, Y., & Erol Gelenbe, A. (2018) · Procedia Computer Science · doi:10.1016/j.procs.2018.07.183 · Cited by 117
A Passivity Framework for Modeling and Mitigating Wormhole Attacks on Networked Control Systems
Lee, P., Clark, A., Bushnell, L. G., & Poovendran, R. (2014) · IEEE Transactions on Automatic Control · doi:10.1109/tac.2014.2351871 · Cited by 101
Jamming in the Internet of Things: A Game-Theoretic Perspective
Namvar, N., Saad, W., Bahadori, N., & Kelley, B. (2016) · Globecom · doi:10.1109/glocom.2016.7841922 · Cited by 91
INTERNET OF THINGS AND THE MAN-IN-THE-MIDDLE ATTACKS – SECURITY AND ECONOMIC RISKS
Čekerevac, Z., Dvořák, Z., Prigoda, L., & Čekerevac, P. (2017) · MEST Journal · doi:10.12709/mest.05.05.02.03 · Cited by 82
Detecting worms via mining dynamic program execution
Wang, X., Yu, W., Champion, A. C., Fu, X., & Xuan, D. (2007) · Security and Privacy in Communication Networks · doi:10.1109/seccom.2007.4550362 · Cited by 60
Self-Disciplinary Worms and Countermeasures: Modeling and Analysis
Yu, W., Zhang, N., Fu, X., & Zhao, W. (2009) · IEEE Transactions on Parallel and Distributed Systems · doi:10.1109/tpds.2009.161 · Cited by 42
Detecting Sinkhole Attack in Wireless Sensor Network
Soni, V. K., Modi, P., & Chaudhri, V. (2013) · Cited by 36
Network Forensics for Detecting Flooding Attack on Internet of Things (IoT) Device
Rizal, R., & Riadi, Y. P. I. (2018) · International Journal of Cyber-Security and Digital Forensics · Cited by 34
An Adaptive Resource Allocation Model With Anti-Jamming in IoT Network
Dou, Z., Si, G., Lin, Y., & Wang, M. (2019) · IEEE Access · doi:10.1109/access.2019.2903207 · Cited by 33
Wormhole Attack: a Major Security Concern in Internet of Things (Iot)
Palacharla, S., Chandan, M., GnanaSuryaTeja, K., & Varshitha, G. (2018) · International Journal of Engineering & Technology · doi:10.14419/ijet.v7i3.27.17748 · Cited by 14
Identifying and Characterizing Bashlite and Mirai C&C Servers
Bastos, G., Marzano, A., Fonseca, O., Fazzion, E. C., Hoepers, C., Steding-Jessen, K., C., C. M. H. P., Cunha, Í. F. S., Guedes, D. O., & Meira, W. (2019) · IEEE Symposium on Computers and Communications (ISCC) · doi:10.1109/iscc47284.2019.8969728 · Cited by 12
An Approach to Discover the Sinkhole and Selective Forwarding Attack in IoT
Shiranzaei, A., & Khan, R. Z. (2018) · Journal of Information Security Research · doi:10.6025/jisr/2018/9/3/107-118 · Cited by 2
Research works printed but not linked: 9
- (2020, October 08). Available online: https://www.gartner.com/en/newsroom/press-releases/2019-08-29-gartner-says-5-8-billion-enterprise-and-automotive-io.
- Sonar, 2014, A survey: DDOS attack on internet of things, Int. J. Eng. Res. Dev., 10, 58
- Meidan, Y., Bohadana, M., Shabtai, A., Ochoa, M., Tippenhauer, N.O., Guarnizo, J.D., and Elovici, Y. (2017). Detection of unauthorized IoT devices using machine learning techniques. arXiv.
- Angrishi, K. (2017). Turning internet of things (iot) into internet of vulnerabilities (iov): Iot botnets. arXiv.
- Campus, 2018, Denial-of-service or flooding attack in IoT routing, Int. J. Pure Appl. Math., 118, 29
- Dash, 2018, Ransomware auto-detection in IoT devices using machine learning, Int. J. Eng. Sci., 8, 19538
- Al-Garadi, M.A., Mohamed, A., Al-Ali, A., Du, X., Ali, I., and Guizani, M. (2018). A Survey of machine and deep learning methods for internet of things (IoT) security. arXiv.
- Xie, X., Wu, D., Liu, S., and Li, R. (2017). IoT data analytics using deep learning. arXiv.
- Manos, A., April, T., Bailey, M., Bernhard, M., Bursztein, E., Cochran, J., Durumeric, Z., Halderman, J.A., Invernizzi, L., and Kallitsis, M. (2017, January 16–18). Understanding the mirai botnet. Proceedings of the 26th {USENIX} Security Symposium ({USENIX} Security 17), Vancouver, BC, Canada.
Cited by
Sorted by citations
Abdullahi, M., Baashar, Y. M., Alhussian, H., Alwadain, A. S., Aziz, N., Capretz, L. F., & Abdulkadir, S. J. (2022) · Electronics · doi:10.3390/electronics11020198 · Cited by 428
Botnet Attack Detection Using Local Global Best Bat Algorithm for Industrial Internet of Things
Alharbi, A., Alosaimi, W. A., Alyami, H., Rauf, H. T., & Damaševičius, R. (2021) · Electronics · doi:10.3390/electronics10111341 · Cited by 116
Olanrewaju-George, B., & Pranggono, B. (2024) · Cyber Security and Applications · doi:10.1016/j.csa.2024.100068 · Cited by 103
Catillo, M., Pecchia, A., & Villano, U. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103210 · Cited by 96
Challenges in detecting security threats in WoT: a systematic literature review
Sardar, R., Anees, T., Al‐Shamayleh, A. S., Mehmood, E., Khalil, W., Akhunzada, A., & Shaikh, F. S. (2025) · Artificial Intelligence Review · doi:10.1007/s10462-025-11176-z · Cited by 80
Metadata
- Authors
- Kim, J., Shim, M., Hong, S., Shin, Y., & Choi, E.
- Affiliations
- Seoul Women's University (KR)
- Corresponding author
- Kim, Jiyeon
- Venue
- Applied Sciences
- Publisher
- MDPI AG
- Published
- 2020-10-08
- Volume
- 10
- Issue
- 19
- Pages
- 7009
- ISSN
- 2076-3417 (ISSN-L)
- OpenAlex
- W3092149785
- Cited by
- 106
- References
- 37
- Citations by year
- 2026: 11 · 2025: 23 · 2024: 26 · 2023: 29 · 2022: 10 · 2021: 7
- FWCI
- 5.40
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Licence
- Locations
- Applied Sciences (publishedVersion, cc-by)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- Funders
- National Research Foundation of Korea (NRF-2018R1D1A1B07050543)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
- Physical Sciences › Computer Science › Artificial Intelligence › Internet Traffic Analysis and Secure E-voting
- Keywords
- IoT botnets, botnet detection, Internet of Things security, Mirai, N-BaIoT dataset, multi-class classification, binary classification, denial-of-service attacks, smart home devices
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review