The DOI matches its Crossref record; 36 of the 37 references it cites were found in a registry or an index.
Intelligent Detection of IoT Botnets Using Machine Learning and Deep Learning
Open accessAbstract
As the number of Internet of Things (IoT) devices connected to the network rapidly increases, network attacks such as flooding and Denial of Service (DoS) are also increasing. These attacks cause network disruption and denial of service to IoT devices. However, a large number of heterogenous devices deployed in the IoT environment make it difficult to detect IoT attacks using traditional rule-based security solutions. It is challenging to develop optimal security models for each type of the device. Machine learning (ML) is an alternative technique that allows one to develop optimal security models based on empirical data from each device. We employ the ML technique for IoT attack detection. We focus on botnet attacks targeting various IoT devices and develop ML-based models for each type of device. We use the N-BaIoT dataset generated by injecting botnet attacks (Bashlite and Mirai) into various types of IoT devices, including a Doorbell, Baby Monitor, Security Camera, and Webcam. We develop a botnet detection model for each device using numerous ML models, including deep learning (DL) models. We then analyze the effective models with a high detection F1-score by carrying out multiclass classification, as well as binary classification, for each model.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“detectors that achieve >99% accuracy on a single dataset routinely lose 10-20 percentage points when transferred cross-dataset”
From Agentic AI and Large Language Models for Autonomous IoT Cybersecurity: A Systematic Survey, Taxonomy, and Research Roadmap (2026) · cites this paper as [15]
Citations
Cites
Lin, J., Yu, W., Zhang, N., Yang, X., Zhang, H., & Zhao, W. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2683200 · Cited by 2,793
That ‘Internet of Things’ Thing
Ashton, K. J. (1999) · Medical Entomology and Zoology · Cited by 2,581
DDoS in the IoT: Mirai and Other Botnets
Kolias, C., Kambourakis, G., Stavrou, A., & Voas, J. (2017) · Computer · doi:10.1109/mc.2017.201 · Cited by 1,892
N-BaIoT—Network-Based Detection of IoT Botnet Attacks Using Deep Autoencoders
Meidan, Y., Bohadana, M., Mathov, Y., Mirsky, Y., Shabtai, A., Breitenbacher, D., & Elovici, Y. (2018) · IEEE Pervasive Computing · doi:10.1109/mprv.2018.03367731 · Cited by 1,668
Deep Learning for IoT Big Data and Streaming Analytics: A Survey
Mohammadi, M., Al-Fuqaha, A., Sorour, S., & Guizani, M. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2844341 · Cited by 1,471
Internet of Things security: A survey
Alaba, F. A., Othman, M., Hashem, M., & Alotaibi, F. A. (2017) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2017.04.002 · Cited by 1,348
Machine Learning DDoS Detection for Consumer Internet of Things Devices
Doshi, R., Apthorpe, N., & Feamster, N. (2018) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2018.00013 · Cited by 920
Neshenko, N., Bou-Harb, E., Crichigno, J., Kaddoum, G., & Ghani, N. (2019) · IEEE Communications Surveys and Tutorials · doi:10.1109/comst.2019.2910750 · Cited by 723
Cyber Security and the Internet of Things: Vulnerabilities, Threats, Intruders and Attacks
Abomhara, M., & Køien, G. M. (2015) · Journal of Cyber Security and Mobility · doi:10.13052/jcsm2245-1439.414 · Cited by 718
Threat analysis of IoT networks using artificial neural network intrusion detection system
Hodo, E., Bellekens, X., Hamilton, A. W., Dubouilh, P.-L., Iorkyase, E. T., Tachtatzis, C., & Atkinson, R. C. (2016) · International Symposium on Networks, Computers and Communications (ISNCC) · doi:10.1109/isncc.2016.7746067 · Cited by 612
Research works printed but not linked: 9
- (2020, October 08). Available online: https://www.gartner.com/en/newsroom/press-releases/2019-08-29-gartner-says-5-8-billion-enterprise-and-automotive-io.
- Sonar, 2014, A survey: DDOS attack on internet of things, Int. J. Eng. Res. Dev., 10, 58
- Meidan, Y., Bohadana, M., Shabtai, A., Ochoa, M., Tippenhauer, N.O., Guarnizo, J.D., and Elovici, Y. (2017). Detection of unauthorized IoT devices using machine learning techniques. arXiv.
- Angrishi, K. (2017). Turning internet of things (iot) into internet of vulnerabilities (iov): Iot botnets. arXiv.
- Campus, 2018, Denial-of-service or flooding attack in IoT routing, Int. J. Pure Appl. Math., 118, 29
- Dash, 2018, Ransomware auto-detection in IoT devices using machine learning, Int. J. Eng. Sci., 8, 19538
- Al-Garadi, M.A., Mohamed, A., Al-Ali, A., Du, X., Ali, I., and Guizani, M. (2018). A Survey of machine and deep learning methods for internet of things (IoT) security. arXiv.
- Xie, X., Wu, D., Liu, S., and Li, R. (2017). IoT data analytics using deep learning. arXiv.
- Manos, A., April, T., Bailey, M., Bernhard, M., Bursztein, E., Cochran, J., Durumeric, Z., Halderman, J.A., Invernizzi, L., and Kallitsis, M. (2017, January 16–18). Understanding the mirai botnet. Proceedings of the 26th {USENIX} Security Symposium ({USENIX} Security 17), Vancouver, BC, Canada.
Cited by
Sorted by citations
Abdullahi, M., Baashar, Y. M., Alhussian, H., Alwadain, A. S., Aziz, N., Capretz, L. F., & Abdulkadir, S. J. (2022) · Electronics · doi:10.3390/electronics11020198 · Cited by 428
Botnet Attack Detection Using Local Global Best Bat Algorithm for Industrial Internet of Things
Alharbi, A., Alosaimi, W. A., Alyami, H., Rauf, H. T., & Damaševičius, R. (2021) · Electronics · doi:10.3390/electronics10111341 · Cited by 116
Olanrewaju-George, B., & Pranggono, B. (2024) · Cyber Security and Applications · doi:10.1016/j.csa.2024.100068 · Cited by 103
Catillo, M., Pecchia, A., & Villano, U. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103210 · Cited by 96
Challenges in detecting security threats in WoT: a systematic literature review
Sardar, R., Anees, T., Al‐Shamayleh, A. S., Mehmood, E., Khalil, W., Akhunzada, A., & Shaikh, F. S. (2025) · Artificial Intelligence Review · doi:10.1007/s10462-025-11176-z · Cited by 80
Metadata
- Authors
- Kim, J., Shim, M., Hong, S., Shin, Y., & Choi, E.
- Affiliations
- Seoul Women's University (KR)
- Corresponding author
- Kim, Jiyeon
- Venue
- Applied Sciences
- Publisher
- MDPI AG
- Published
- 2020-10-08
- Volume
- 10
- Issue
- 19
- Pages
- 7009
- ISSN
- 2076-3417 (ISSN-L)
- OpenAlex
- W3092149785
- Cited by
- 106
- References
- 37
- Citations by year
- 2026: 11 · 2025: 23 · 2024: 26 · 2023: 29 · 2022: 10 · 2021: 7
- FWCI
- 5.40
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Licence
- Locations
- Applied Sciences (publishedVersion, cc-by)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- Funders
- National Research Foundation of Korea (NRF-2018R1D1A1B07050543)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
- Physical Sciences › Computer Science › Artificial Intelligence › Internet Traffic Analysis and Secure E-voting
- Keywords
- IoT botnets, botnet detection, Internet of Things security, Mirai, N-BaIoT dataset, multi-class classification, binary classification, denial-of-service attacks, smart home devices
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
