{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T02:30:33Z","timestamp":1781490633928,"version":"3.54.1"},"reference-count":47,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2022,10,7]],"date-time":"2022-10-07T00:00:00Z","timestamp":1665100800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2022,10,7]],"date-time":"2022-10-07T00:00:00Z","timestamp":1665100800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Netw Syst Manage"],"published-print":{"date-parts":[[2023,1]]},"DOI":"10.1007\/s10922-022-09690-4","type":"journal-article","created":{"date-parts":[[2022,10,7]],"date-time":"2022-10-07T04:03:47Z","timestamp":1665115427000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":22,"title":["VAE-Based Latent Representations Learning for Botnet Detection in IoT Networks"],"prefix":"10.1007","volume":"31","author":[{"given":"Ramzi","family":"Snoussi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Habib","family":"Youssef","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,10,7]]},"reference":[{"key":"9690_CR1","doi-asserted-by":"publisher","first-page":"2787","DOI":"10.1016\/j.comnet.2010.05.010","volume":"54","author":"L Atzoria","year":"2010","unstructured":"Atzoria, L., Ierab, A., Morabito, G.: The Internet of Things: a survey. Comput. Netw. 54, 2787\u20132805 (2010). https:\/\/doi.org\/10.1016\/j.comnet.2010.05.010","journal-title":"Comput. Netw."},{"key":"9690_CR2","doi-asserted-by":"publisher","first-page":"76","DOI":"10.1109\/MC.2017.62","volume":"50","author":"E Bertino","year":"2017","unstructured":"Bertino, E., Islam, N.: Botnets and Internet of Things security. IEEE Comput. Soc. 50, 76\u201379 (2017). https:\/\/doi.org\/10.1109\/MC.2017.62","journal-title":"IEEE Comput. Soc."},{"key":"9690_CR3","doi-asserted-by":"crossref","unstructured":"Zeidanloo, H.R., Shooshtari, M., Amoli, P., Safari, M., Zamani, M.A.: Taxonomy of botnet detection techniques. In: IEEE The Third International Conference on Computer Science and Information Technology, pp. 158\u2013162 (2010)","DOI":"10.1109\/ICCSIT.2010.5563555"},{"key":"9690_CR4","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1109\/MPRV.2018.03367731","volume":"17","author":"Y Meidan","year":"2018","unstructured":"Meidan, Y., et al.: N-BaIoT network based detection of IoT botnet attacks using deep autoencoders. IEEE Pervasive Comput. 17, 12\u201322 (2018). https:\/\/doi.org\/10.1109\/MPRV.2018.03367731","journal-title":"IEEE Pervasive Comput."},{"key":"9690_CR5","doi-asserted-by":"crossref","unstructured":"Kompougias, O., et\u00a0al.: IoT botnet detection on flow data using autoencoders. In: IEEE International Mediterranean Conference on Communication and Networking (MeditCom), pp. 506\u2013511 (2021)","DOI":"10.1109\/MeditCom49071.2021.9647639"},{"key":"9690_CR6","doi-asserted-by":"publisher","first-page":"2809","DOI":"10.1007\/s12652-019-01387-y","volume":"11","author":"A Shorman","year":"2020","unstructured":"Shorman, A., Faris, H., Aljarah, I.: Unsupervised intelligence system based on one class support vector machine and grey wolf optimization for iot botnet detection. J. Ambient. Intell. Humaniz. Comput. 11, 2809\u20132825 (2020). https:\/\/doi.org\/10.1007\/s12652-019-01387-y","journal-title":"J. Ambient. Intell. Humaniz. Comput."},{"key":"9690_CR7","doi-asserted-by":"crossref","unstructured":"N\u00f5mm, S., Bashsi, H.: Unsupervised anomaly based botnet detection in IoT networks. In: IEEE 17th international conference on machine learning and applications, pp. 1048\u20131053 (2019)","DOI":"10.1109\/ICMLA.2018.00171"},{"key":"9690_CR8","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/1541880.1541882","volume":"41","author":"V Chandola","year":"2009","unstructured":"Chandola, V., Banerjee, A., Kumar, V.: Anomaly detection: a survey. ACM Comput. Surv. 41, 1\u201358 (2009). https:\/\/doi.org\/10.1145\/1541880.1541882","journal-title":"ACM Comput. Surv."},{"key":"9690_CR9","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1016\/j.patcog.2016.03.028","volume":"58","author":"S Erfani","year":"2016","unstructured":"Erfani, S., Rajasegarar, S., Karunasekera, S., Leckie, C.: High-dimensional and large-scale anomaly detection using a linear one-class SVM with deep learning. Pattern Recogn. 58, 121\u2013134 (2016). https:\/\/doi.org\/10.1016\/j.patcog.2016.03.028","journal-title":"Pattern Recogn."},{"key":"9690_CR10","doi-asserted-by":"publisher","first-page":"1798","DOI":"10.1109\/TPAMI.2013.50","volume":"35","author":"Y Bengio","year":"2013","unstructured":"Bengio, Y., Courville, A., Vincent, P.: Representation learning: a review and new perspectives. IEEE Trans. Pattern Anal. Mach. Intell. 35, 1798\u20131828 (2013). https:\/\/doi.org\/10.1109\/TPAMI.2013.50","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"9690_CR11","doi-asserted-by":"publisher","first-page":"265","DOI":"10.1016\/j.jfds.2017.05.001","volume":"2","author":"G Zhong","year":"2016","unstructured":"Zhong, G., Wang, L., Ling, X., Dong, J.: An overview on data representation learning: from traditional feature learning to recent deep learning. J. Finance Data Sci. 2, 265\u2013278 (2016). https:\/\/doi.org\/10.1016\/j.jfds.2017.05.001","journal-title":"J. Finance Data Sci."},{"key":"9690_CR12","doi-asserted-by":"publisher","DOI":"10.1109\/TAFFC.2021.3114365","author":"S Latif","year":"2021","unstructured":"Latif, S., Rana, R., Khalifa, S., Jurdak, R.: Survey of deep representation learning for speech emotion recognition. IEEE Trans. Affect. Comput. (2021). https:\/\/doi.org\/10.1109\/TAFFC.2021.3114365","journal-title":"IEEE Trans. Affect. Comput."},{"key":"9690_CR13","unstructured":"Kingma, D.P., Welling, M.: Auto-encoding variational Bayes (2014). https:\/\/arxiv.org\/abs\/1312.6114"},{"key":"9690_CR14","unstructured":"Latif, S., Rana, R., Qadir, J., Epps, J.: Varitional autoencoders for learning latent representations of speech emotion: a preliminary study (2020). https:\/\/arxiv.org\/abs\/1712.08708"},{"key":"9690_CR15","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.eswa.2020.114020","volume":"164","author":"RA Mancisidor","year":"2021","unstructured":"Mancisidor, R.A., Kampffeyer, M., Aas, K., Jenssen, R.: Learning latent representations of bank customers with the variational autoencoder. Expert Syst. Appl. 164, 1\u201313 (2021). https:\/\/doi.org\/10.1016\/j.eswa.2020.114020","journal-title":"Expert Syst. Appl."},{"key":"9690_CR16","unstructured":"Dong, H., Xie, J., Jing, Z., Ren, D.: Variational autoencoder for anti-cancer drug response prediction (2021). https:\/\/arxiv.org\/abs\/2008.09763"},{"key":"9690_CR17","doi-asserted-by":"publisher","first-page":"6882","DOI":"10.1109\/JIOT.2020.2970501","volume":"7","author":"M Eskandari","year":"2020","unstructured":"Eskandari, M., Janjua, Z.H., Vecchio, M., Antonelli, F.: Passban IDS: an intelligent anomaly-based intrusion detection system for IoT edge devices. IEEE Internet Things J. 7, 6882\u20136897 (2020). https:\/\/doi.org\/10.1109\/JIOT.2020.2970501","journal-title":"IEEE Internet Things J."},{"key":"9690_CR18","doi-asserted-by":"crossref","unstructured":"Pathak, A.K., Saguna, S., Mitra, K., Ahlund, C.: Anomaly detection using machine learning to discover sensor tampering in IoT systems. In: IEEE International Conference on Communications (ICC) (2021)","DOI":"10.1109\/ICC42927.2021.9500825"},{"key":"9690_CR19","doi-asserted-by":"publisher","first-page":"45","DOI":"10.1109\/TNSM.2020.2966951","volume":"17","author":"I Hafeez","year":"2020","unstructured":"Hafeez, I., Antikainen, M., Ding, A.Y.: IoT-KEEPER: detecting malicious IoT network activity using online traffic analysis at the edge. IEEE Trans. Netw. Serv. Manage. 17, 45\u201359 (2020). https:\/\/doi.org\/10.1109\/TNSM.2020.2966951","journal-title":"IEEE Trans. Netw. Serv. Manage."},{"key":"9690_CR20","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.iot.2019.100129","volume":"14","author":"H HaddadPajouh","year":"2021","unstructured":"HaddadPajouh, H., Dehghantanha, A., Parizi, R.M., Aledhari, M., Karimipour, H.: A survey on internet of things security: requirements, challenges, and solutions. Internet of Things 14, 1\u201339 (2021). https:\/\/doi.org\/10.1016\/j.iot.2019.100129","journal-title":"Internet of Things"},{"key":"9690_CR21","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.cosrev.2022.100467","volume":"44","author":"E Schiller","year":"2022","unstructured":"Schiller, E., et al.: Landscape of IoT security. Comput. Sci. Rev. 44, 1\u201318 (2022). https:\/\/doi.org\/10.1016\/j.cosrev.2022.100467","journal-title":"Comput. Sci. Rev."},{"key":"9690_CR22","doi-asserted-by":"publisher","first-page":"232","DOI":"10.1016\/j.neucom.2015.08.104","volume":"184","author":"Y Wang","year":"2016","unstructured":"Wang, Y., Yao, H., Zhao, S.: Auto-encoder based dimensionality reduction. Neurocomputing 184, 232\u2013242 (2016). https:\/\/doi.org\/10.1016\/j.neucom.2015.08.104","journal-title":"Neurocomputing"},{"key":"9690_CR23","doi-asserted-by":"crossref","unstructured":"Dong, C., Xue, T., Wang, C.: The feature representation ability of variational autoencoder. In: IEEE Third International Conference on Data Science in Cyberspace (DSC), pp. 680\u2013684 (2018)","DOI":"10.1109\/DSC.2018.00108"},{"key":"9690_CR24","doi-asserted-by":"crossref","unstructured":"Cao, V., Nicolau, M., McDermott, J.: A hybrid autoencoder and density estimation model for anomaly detection. In: The International Conference on Parallel Problem Solving from Nature, pp. 717\u2013726 (2016)","DOI":"10.1007\/978-3-319-45823-6_67"},{"key":"9690_CR25","doi-asserted-by":"publisher","first-page":"859","DOI":"10.1080\/01621459.2017.1285773","volume":"112","author":"DM Blei","year":"2017","unstructured":"Blei, D.M., Kucukelbir, A., McAuliffe, J.D.: Variational inference: a review for statisticians. J. Am. Stat. Assoc. 112, 859\u2013877 (2017). https:\/\/doi.org\/10.1080\/01621459.2017.1285773","journal-title":"J. Am. Stat. Assoc."},{"key":"9690_CR26","unstructured":"Higgins, I., et\u00a0al.: $$\\beta$$-VAE: learning basic visual concepts with a constrained variational framework. In: The international conference on learning representation (ICLR), pp. 1\u201322 (2017)"},{"key":"9690_CR27","doi-asserted-by":"publisher","first-page":"1443","DOI":"10.1162\/089976601750264965","volume":"13","author":"B Scholkopf","year":"2001","unstructured":"Scholkopf, B., Platt, J.C., Shawe-Taylor, J., Smola, A.J., Williamas, R.C.: Estimating the support of a high-dimensional distribution. Neural Comput. 13, 1443\u20131471 (2001). https:\/\/doi.org\/10.1162\/089976601750264965","journal-title":"Neural Comput."},{"key":"9690_CR28","doi-asserted-by":"crossref","unstructured":"Breunig, M.M., Kriegel, H., Ng, R.T., Sander, J., Williamas, R.C. LOF: identifying density-based local outliers. In: ACM SIGMOD international conference on management of data (SIGMOD), vol. 29, pp. 93\u2013104 (2000)","DOI":"10.1145\/335191.335388"},{"key":"9690_CR29","doi-asserted-by":"crossref","unstructured":"Liu, F.T., Ting, K.M., Zhou, Z.: Isolation forest. In: Eighth IEEE International Conference on Data Mining, pp. 413\u2013422 (2008)","DOI":"10.1109\/ICDM.2008.17"},{"key":"9690_CR30","doi-asserted-by":"crossref","unstructured":"Ilonen, J., Paalanen, P., Kamarainen, J., Kalviainen, H.: Gaussian mixture pdf in one-class classification: computing and utilizing confidence values. In: 18th International Conference on Pattern Recognition (ICPR\u201906), pp. 577\u2013580 (2006)","DOI":"10.1109\/ICPR.2006.595"},{"key":"9690_CR31","unstructured":"Yeung, D.Y. & Chow, C.: Parzen-window network intrusion detectors. In: International Conference on Pattern Recognition, pp. 385\u2013388 (2002)"},{"key":"9690_CR32","unstructured":"An, J., Cho, S.: Variational autoencoder based anomaly detection using reconstruction probability (2015). SNU Data Mining Center. https:\/\/dm.snu.ac.kr\/static\/docs\/TR\/SNUDM-TR-2015-03.pdf"},{"key":"9690_CR33","doi-asserted-by":"publisher","first-page":"2528","DOI":"10.1109\/TIFS.2019.2904844","volume":"14","author":"L Friedman","year":"2019","unstructured":"Friedman, L., Komogortev, O.V.: Assessment of the effectiveness of seven biometric feature normalization techniques. IEEE Trans. Inf. Forensics Secur. 14, 2528\u20132536 (2019). https:\/\/doi.org\/10.1109\/TIFS.2019.2904844","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"9690_CR34","doi-asserted-by":"publisher","first-page":"561","DOI":"10.1093\/clinchem\/39.4.561","volume":"39","author":"MH Zweig","year":"1993","unstructured":"Zweig, M.H., Campbell, G.: Receiver-operating characteristic (ROC) plots: a fundamental evaluation tool in clinical medicine. Clin. Chem. 39, 561\u2013577 (1993). https:\/\/doi.org\/10.1093\/clinchem\/39.4.561","journal-title":"Clin. Chem."},{"key":"9690_CR35","doi-asserted-by":"publisher","first-page":"299","DOI":"10.1109\/TKDE.2005.50","volume":"17","author":"J Huang","year":"2005","unstructured":"Huang, J., Ling, C.X.: Using AUC and accuracy in evaluating learning algorithms. IEEE Trans. Knowl. Data Eng. 17, 299\u2013310 (2005). https:\/\/doi.org\/10.1109\/TKDE.2005.50","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"9690_CR36","doi-asserted-by":"publisher","first-page":"3074","DOI":"10.1109\/TCYB.2018.2838668","volume":"49","author":"VL Cao","year":"2018","unstructured":"Cao, V.L., Nicolau, M., McDermott, J.: Learning neural representations for network anomaly detection. IEEE Trans. Cybern. 49, 3074\u20133087 (2018). https:\/\/doi.org\/10.1109\/TCYB.2018.2838668","journal-title":"IEEE Trans. Cybern."},{"key":"9690_CR37","first-page":"2825","volume":"12","author":"F Pedregosa","year":"2011","unstructured":"Pedregosa, F., et al.: Scikit-learn: machine learning in python. J. Mach. Learn. Res. 12, 2825\u20132830 (2011)","journal-title":"J. Mach. Learn. Res."},{"key":"9690_CR38","doi-asserted-by":"crossref","unstructured":"Lee, C.H., et\u00a0al.: Anomaly detection of storage battery based on isolation forest and hyperparameter tuning. In: Proceedings of the 2020 5th International Conference on Mathematics and Artificial Intelligence (ICMAI), pp. 229\u2013233 (2020)","DOI":"10.1145\/3395260.3395271"},{"key":"9690_CR39","doi-asserted-by":"crossref","unstructured":"Xu, Z., Kakde, D., Chaudhuri, A.: Automatic hyperparameter tuning method for local outlier factor, with applications to anomaly detection. In: IEEE International Conference on Big Data (Big Data), pp. 4201\u20134207 (2019)","DOI":"10.1109\/BigData47090.2019.9006151"},{"key":"9690_CR40","doi-asserted-by":"publisher","DOI":"10.1002\/9780470316849","volume-title":"Multivariate Density Estimation: Theory, Practice, and Visualization","author":"DW Scott","year":"1992","unstructured":"Scott, D.W.: Multivariate Density Estimation: Theory, Practice, and Visualization. Wiley Series in Probability and Statistics, Wiley Online Library (1992)"},{"key":"9690_CR41","doi-asserted-by":"publisher","first-page":"461","DOI":"10.1214\/aos\/1176344136","volume":"6","author":"G Schwarz","year":"1978","unstructured":"Schwarz, G.: Estimating the dimension of a model. Ann. Stat. 6, 461\u2013464 (1978)","journal-title":"Ann. Stat."},{"key":"9690_CR42","unstructured":"Kingma, D.P., Ba, J.: Adam: a method for stochastic optimization (2017). https:\/\/arxiv.org\/abs\/1412.6980"},{"key":"9690_CR43","unstructured":"Glorot, X., Bengio, Y.: Understanding the difficulty of training deep feedforward neural networks. In: The International Conference on Artificial Intelligence and Statistics (AISTATS), pp. 249\u2013256 (2010)"},{"key":"9690_CR44","volume-title":"Neural Networks: Tricks of the Trade","author":"L Prechelt","year":"1998","unstructured":"Prechelt, L.: Early stopping-but when? In: Nugent, R. (ed.) Neural Networks: Tricks of the Trade. Springer, Berlin (1998)"},{"key":"9690_CR45","doi-asserted-by":"publisher","first-page":"1771","DOI":"10.1162\/089976602760128018","volume":"14","author":"GE Hinton","year":"2002","unstructured":"Hinton, G.E.: Training products of experts by minimizing contrastive divergence. Neural Comput. 14, 1771\u20131800 (2002). https:\/\/doi.org\/10.1162\/089976602760128018","journal-title":"Neural Comput."},{"key":"9690_CR46","unstructured":"Implementation of Deep Belief Network (2021). https:\/\/github.com\/albertbup\/deep-belief-network"},{"key":"9690_CR47","first-page":"2579","volume":"9","author":"L Maaten","year":"2008","unstructured":"Maaten, L., Hinton, G.: Visualizing data using $$t$$-SNE. J. Mach. Learn. Res. 9, 2579\u20132605 (2008)","journal-title":"J. Mach. Learn. Res."}],"container-title":["Journal of Network and Systems Management"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-022-09690-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10922-022-09690-4\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-022-09690-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,2,2]],"date-time":"2023-02-02T02:09:47Z","timestamp":1675303787000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10922-022-09690-4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,10,7]]},"references-count":47,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2023,1]]}},"alternative-id":["9690"],"URL":"https:\/\/doi.org\/10.1007\/s10922-022-09690-4","relation":{},"ISSN":["1064-7570","1573-7705"],"issn-type":[{"value":"1064-7570","type":"print"},{"value":"1573-7705","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,10,7]]},"assertion":[{"value":"31 March 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 July 2022","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 September 2022","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"7 October 2022","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare they have no financial interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}},{"value":"There are no human\/ or animal subjects in this article and informed consent is not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical Approval"}}],"article-number":"4"}}