{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,11]],"date-time":"2026-04-11T12:49:48Z","timestamp":1775911788161,"version":"3.50.1"},"reference-count":47,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2024,4,1]],"date-time":"2024-04-01T00:00:00Z","timestamp":1711929600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,4,1]],"date-time":"2024-04-01T00:00:00Z","timestamp":1711929600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Netw Syst Manage"],"published-print":{"date-parts":[[2024,4]]},"DOI":"10.1007\/s10922-024-09817-9","type":"journal-article","created":{"date-parts":[[2024,4,14]],"date-time":"2024-04-14T11:01:41Z","timestamp":1713092501000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":8,"title":["On Feature Selection Algorithms for Effective Botnet Detection"],"prefix":"10.1007","volume":"32","author":[{"given":"Meher","family":"Afroz","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Muntaka","family":"Ibnath","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ashikur","family":"Rahman","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jakia","family":"Sultana","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Raqeebir","family":"Rab","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,4,14]]},"reference":[{"key":"9817_CR1","unstructured":"Morgan, S.: Cybercrime To Cost The World \\$10.5 Trillion Annually By 2025. https:\/\/cybersecurityventures.com\/hackerpocalypse-cybercrime-report-2016\/. Accessed 15 May 2022 (2020)"},{"key":"9817_CR2","doi-asserted-by":"crossref","unstructured":"Faek, R., Al-Fawa\u2019reh, M., Al-Fayoumi, M.: Exposing bot attacks using machine learning and flow level analysis. In: International Conference on Data Science, E-learning and Information Systems 2021 (2021)","DOI":"10.1145\/3460620.3460739"},{"key":"9817_CR3","unstructured":"Nivargi, V., Bhaowal, M., Lee, T.: Machine learning based botnet detection. CS 229 Final Proj. Report, Comput. Sci. Dep. Stanford Univ (2006)"},{"key":"9817_CR4","first-page":"1","volume":"2020","author":"AA Ahmed","year":"2020","unstructured":"Ahmed, A.A., et al.: Deep learning-based classification model for botnet attack detection. J. Ambient Intell. Hum. Comput. 2020, 1\u201310 (2020)","journal-title":"J. Ambient Intell. Hum. Comput."},{"key":"9817_CR5","doi-asserted-by":"crossref","unstructured":"Miller, S., Busby-Earle, C.: The role of machine learning in botnet detection. In: 2016 11th International Conference for Internet Technology and Secured Transactions (icitst). IEEE (2016)","DOI":"10.1109\/ICITST.2016.7856730"},{"issue":"1","key":"9817_CR6","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1016\/j.comnet.2011.07.018","volume":"56","author":"H Choi","year":"2012","unstructured":"Choi, H., Lee, H.: Identifying botnets by capturing group activities in DNS traffic. Comput. Netw. 56(1), 20\u201333 (2012)","journal-title":"Comput. Netw."},{"issue":"1","key":"9817_CR7","first-page":"2","volume":"10","author":"TS Hyslip","year":"2015","unstructured":"Hyslip, T.S., Pittman, J.M.: A survey of botnet detection techniques by command and control infrastructure. J. Digit. Forensics Secur. Law 10(1), 2 (2015)","journal-title":"J. Digit. Forensics Secur. Law"},{"key":"9817_CR8","unstructured":"Stevanovic, M., Pedersen, J.M.: Machine learning for identifying botnet network traffic (2013)"},{"key":"9817_CR9","doi-asserted-by":"publisher","first-page":"49566","DOI":"10.1109\/ACCESS.2022.3171226","volume":"10","author":"S Huh","year":"2022","unstructured":"Huh, S., et al.: A comprehensive analysis of today\u2019s malware and its distribution network: common adversary strategies and implications. IEEE Access 10, 49566\u201349584 (2022)","journal-title":"IEEE Access"},{"key":"9817_CR10","doi-asserted-by":"publisher","first-page":"59353","DOI":"10.1109\/ACCESS.2021.3073408","volume":"9","author":"N Mishra","year":"2021","unstructured":"Mishra, N., Pandya, S.: Internet of things applications, security challenges, attacks, intrusion detection, and future visions: a systematic review. IEEE Access 9, 59353\u201359377 (2021)","journal-title":"IEEE Access"},{"key":"9817_CR11","unstructured":"Mai, L., Park, M.: A comparison of clustering algorithms for botnet detection based on network flow. In: 2016 Eighth International Conference on Ubiquitous and Future Networks (ICUFN). IEEE (2016)"},{"key":"9817_CR12","first-page":"1","volume":"11","author":"F Tariq","year":"2017","unstructured":"Tariq, F., Baig, S.: Machine learning based botnet detection in software defined networks. Int. J. Secur. Appl 11, 1\u201312 (2017)","journal-title":"Int. J. Secur. Appl"},{"key":"9817_CR13","unstructured":"Gu, G., et al.: Botminer: Clustering analysis of network traffic for protocol-and structure-independent botnet detection. 139 (2008)"},{"key":"9817_CR14","doi-asserted-by":"crossref","unstructured":"Saad, S., Traore, I., Ghorbani, A., Sayed, B., Zhao, D., Lu, W., Felix, J., Hakimian, P.: Detecting P2P botnets through network behavior analysis and machine learning. In: IEEE PST, pp. 174\u2013180 (2011)","DOI":"10.1109\/PST.2011.5971980"},{"key":"9817_CR15","unstructured":"Kaushik, S.: Feature selection methods: machine learn ing. https:\/\/www.analyticsvidhya.com\/blog\/2016\/12\/introduction-to-feature-selection-methods-with-an-example-or-how-to-select-the-right-variables\/ (2020)"},{"key":"9817_CR16","doi-asserted-by":"publisher","unstructured":"Zhao, Z., Anand, R., Wang, M.: Maximum relevance and minimum redundancy feature selection methods for a marketing machine learning platform. In: 2019 IEEE International Conference on Data Science and Advanced Analytics (DSAA), pp. 442\u2013452 (2019). https:\/\/doi.org\/10.1109\/DSAA.2019.00059","DOI":"10.1109\/DSAA.2019.00059"},{"key":"9817_CR17","doi-asserted-by":"crossref","unstructured":"Beigi, E.B., Jazi, H.H., Stakhanova, N., Ghorbani, A.A.: Towards effective feature selection in machine learning-based botnet detection approaches. In: IEEE Conference on Communications and Network Security, pp. 247\u2013255 (2014)","DOI":"10.1109\/CNS.2014.6997492"},{"key":"9817_CR18","doi-asserted-by":"crossref","unstructured":"Hossain, M.I., Eshrak, S., Auvik, M.J., Nasim, S.F., Rab, R., Rahman, A.: Efficient feature selection for detecting botnets based on network traffic and behavior analysis. In: 7th IEEE NSysS, pp. 56\u201362 (2020)","DOI":"10.1145\/3428363.3428378"},{"key":"9817_CR19","doi-asserted-by":"publisher","first-page":"34","DOI":"10.5815\/ijmecs.2019.05.04","volume":"11","author":"P Chaudhary","year":"2019","unstructured":"Chaudhary, P., Shruti, S., Vanshika: Detection of botnet using flow analysis and clustering algorithm. Int. J. Mod. Educ. Comput. Sci. 11, 34\u201340 (2019)","journal-title":"Int. J. Mod. Educ. Comput. Sci."},{"key":"9817_CR20","unstructured":"Stevanovic, M., Pedersen, J.M.: Machine learning for identifying botnet network traffic (2013)"},{"key":"9817_CR21","doi-asserted-by":"crossref","unstructured":"Livadas, C., Walsh, R., Lapsley, D., Strayer, W.T.: Using machine learning techniques to identify botnet traffic. In: In IEEE LCN, pp. 967\u2013974 (2006)","DOI":"10.1109\/LCN.2006.322210"},{"issue":"2013","key":"9817_CR22","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1016\/j.cose.2013.04.007","volume":"39","author":"D Zhao","year":"2013","unstructured":"Zhao, D., Traore, I., Sayed, B., Lu, W., Saad, S., Ghorbani, A., Garant, D.: Botnet detection based on traffic behavior analysis and flow intervals. Comput. Secur. 39(2013), 2\u201316 (2013)","journal-title":"Comput. Secur."},{"key":"9817_CR23","unstructured":"Guofei, G., Perdisci, R., Zhang, J., Lee, W.: Botminer: Clustering analysis of network traffic for protocol-and structure-independent botnet detection (2008)"},{"key":"9817_CR24","doi-asserted-by":"publisher","unstructured":"Alshamkhany, M., Alshamkhany, M., Wisam, D., Mohamed, A., Fadi, S.: Botnet attack detection using machine learning (2020). https:\/\/doi.org\/10.1109\/IIT50501.2020.9299061","DOI":"10.1109\/IIT50501.2020.9299061"},{"key":"9817_CR25","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2021.107525","volume":"97","author":"GL Nguyen","year":"2022","unstructured":"Nguyen, G.L., et al.: A collaborative approach to early detection of IoT Botnet. Comput. Electr. Eng. 97, 107525 (2022)","journal-title":"Comput. Electr. Eng."},{"key":"9817_CR26","doi-asserted-by":"crossref","unstructured":"Gahelot, P., Dayal, N.: Flow based botnet traffic detection using machine learning. In: Proceedings of ICETIT 2019. Springer, Cham, Switzerland, pp. 418\u2013426 (2020)","DOI":"10.1007\/978-3-030-30577-2_36"},{"key":"9817_CR27","doi-asserted-by":"publisher","first-page":"120567","DOI":"10.1109\/ACCESS.2021.3108222","volume":"9","author":"J Velasco-Mata","year":"2021","unstructured":"Velasco-Mata, J., et al.: Efficient detection of botnet traffic by features selection and decision trees. IEEE Access 9, 120567\u2013120579 (2021)","journal-title":"IEEE Access"},{"key":"9817_CR28","doi-asserted-by":"crossref","unstructured":"Zhao, D., Traore, I., Ghorbani, A., Sayed, B., Saad, S., Lu, W.: Peer to peer botnet detection based on flow intervals. In: IFIP SEC (2012)","DOI":"10.1007\/978-3-642-30436-1_8"},{"key":"9817_CR29","doi-asserted-by":"crossref","unstructured":"Liao, W.-H., Chang, C.-C.: Peer to peer botnet detection using data mining scheme. In: International Conference on Internet Technology and Applications, pp. 1\u20134 (2010)","DOI":"10.1109\/ITAPP.2010.5566407"},{"key":"9817_CR30","unstructured":"John, W., Tafvelin, S.: Differences between in-and outbound internet backbone traffic. In: TERENA Networking Conference (TNC) (2007)"},{"key":"9817_CR31","doi-asserted-by":"publisher","first-page":"104","DOI":"10.1007\/978-3-642-27937-9_8","volume-title":"Information Security Technology for Applications","author":"M Almgren","year":"2012","unstructured":"Almgren, M., John, W.: Tracking malicious hosts on a 10Gbps backbone link. In: Information Security Technology for Applications, pp. 104\u2013120. Springer Berlin Heidelberg, Berlin (2012)"},{"issue":"2008","key":"9817_CR32","first-page":"1","volume":"8","author":"E Stinson","year":"2008","unstructured":"Stinson, E., Mitchell, J.C.: Towards systematic evaluation of the evadability of bot\/botnet detection methods. WOOT 8(2008), 1\u20139 (2008)","journal-title":"WOOT"},{"key":"9817_CR33","doi-asserted-by":"crossref","unstructured":"Strayer, W.T., Lapsely, D., Walsh, R., Livadas, C.: Botnet detection based on network behavior. In: Botnet Detection. Springer, pp. 1\u201324 (2008)","DOI":"10.1007\/978-0-387-68768-1_1"},{"key":"9817_CR34","doi-asserted-by":"crossref","unstructured":"Garant, D., Lu, W.: Mining botnet behaviors on the large-scale web application community. In: 2013 27th International Conference on Advanced Information Networking and Applications Workshops. IEEE, pp. 185-190, (2013)","DOI":"10.1109\/WAINA.2013.235"},{"key":"9817_CR35","doi-asserted-by":"crossref","unstructured":"Yu, X., Dong, X., Yu, G., Qin, Y., Yue, D.: Data-Adaptive Clustering Analysis for Online Botnet Detection, vol. 1 (2010)","DOI":"10.1109\/CSO.2010.214"},{"key":"9817_CR36","unstructured":"University of New Brunswick(UNB). 2014. ISCX Botnet dataset 2014. https:\/\/www.unb.ca\/cic\/datasets\/botnet.html"},{"issue":"5","key":"9817_CR37","doi-asserted-by":"publisher","first-page":"971","DOI":"10.1109\/TCBB.2015.2478454","volume":"13","author":"JC Ang","year":"2016","unstructured":"Ang, J.C., Mirzal, A., Haron, H., Hamed, H.N.A.: Supervised, unsupervised, and semi-supervised feature selection: a review on gene selection. IEEE\/ACM Trans. Comput. Biol. Bioinform. 13(5), 971\u2013989 (2016). https:\/\/doi.org\/10.1109\/TCBB.2015.2478454","journal-title":"IEEE\/ACM Trans. Comput. Biol. Bioinform."},{"key":"9817_CR38","unstructured":"Brownlee, J.: How to choose a feature selection method for machine learning. Mach. Learn. Mastery 10 (2019)"},{"issue":"2","key":"9817_CR39","doi-asserted-by":"publisher","first-page":"907","DOI":"10.1007\/s10462-019-09682-y","volume":"53","author":"S Solorio-Fern\u00e1ndez","year":"2020","unstructured":"Solorio-Fern\u00e1ndez, S., Ariel Carrasco-Ochoa, J., Mart\u00ednez-Trinidad, J.F.: A review of unsupervised feature selection methods. Artif. Intell. Rev. 53(2), 907\u2013948 (2020)","journal-title":"Artif. Intell. Rev."},{"issue":"3","key":"9817_CR40","doi-asserted-by":"publisher","first-page":"3797","DOI":"10.1007\/s11042-018-6083-5","volume":"78","author":"X Deng","year":"2019","unstructured":"Deng, X., et al.: Feature selection for text classification: a review. Multimed. Tools Appl. 78(3), 3797\u20133816 (2019)","journal-title":"Multimed. Tools Appl."},{"issue":"2","key":"9817_CR41","doi-asserted-by":"publisher","first-page":"341","DOI":"10.1007\/s12010-019-03093-z","volume":"190","author":"AK Verma","year":"2020","unstructured":"Verma, A.K., Pal, S., Kumar, S.: Prediction of skin disease using ensemble data mining techniques and feature selection method\u2014a comparative study. Appl. Biochem. Biotechnol. 190(2), 341\u2013359 (2020)","journal-title":"Appl. Biochem. Biotechnol."},{"key":"9817_CR42","doi-asserted-by":"publisher","unstructured":"Wafi, M., Faruq, U., Supianto, A.A.: Automatic feature selection for modified k-nearest neighbor to predict student\u2019s academic performance. In: 2019 International Conference on Sustainable Information Engineering and Technology (SIET), pp. 44\u201348 (2019). https:\/\/doi.org\/10.1109\/SIET48054.2019.8986074","DOI":"10.1109\/SIET48054.2019.8986074"},{"key":"9817_CR43","doi-asserted-by":"publisher","unstructured":"Bashir, S., Khan, Z.S., Hassan Khan, F., Anjum, A., Bashir, K.: Improving heart disease prediction using feature selection approaches. In: 2019 16th International Bhurban Conference on Applied Sciences and Technology (IBCAST), pp. 619\u2013623 (2019). https:\/\/doi.org\/10.1109\/IBCAST.2019.8667106","DOI":"10.1109\/IBCAST.2019.8667106"},{"issue":"1","key":"9817_CR44","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s40537-020-00379-6","volume":"7","author":"SM Kasongo","year":"2020","unstructured":"Kasongo, S.M., Sun, Y.: Performance analysis of intrusion detection systems using a feature selection method on the UNSW-NB15 dataset. J. Big Data 7(1), 1\u201320 (2020)","journal-title":"J. Big Data"},{"key":"9817_CR45","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101851","volume":"95","author":"XK Li","year":"2020","unstructured":"Li, X.K., et al.: Building auto-encoder intrusion detection system based on random forest feature selection. Comput. Secur. 95, 101851 (2020)","journal-title":"Comput. Secur."},{"key":"9817_CR46","doi-asserted-by":"crossref","unstructured":"Zaheer, A., Sidra, T., Almufareh, M.F., Bushra, H.: A hybrid model for botnet detection using machine learning. In: 2023 International Conference on Business Analytics for Technology and Security (ICBATS). IEEE, pp. 1\u20138 (2023)","DOI":"10.1109\/ICBATS57792.2023.10111161"},{"key":"9817_CR47","doi-asserted-by":"publisher","first-page":"1405","DOI":"10.1016\/j.procs.2023.01.119","volume":"218","author":"RSS Moorthy","year":"2023","unstructured":"Moorthy, R.S.S., Nathiya, N.: Botnet detection using artificial intelligence. Procedia Comput. Sci. 218, 1405\u20131413 (2023)","journal-title":"Procedia Comput. Sci."}],"container-title":["Journal of Network and Systems Management"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-024-09817-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10922-024-09817-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-024-09817-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,16]],"date-time":"2024-11-16T01:34:01Z","timestamp":1731720841000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10922-024-09817-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4]]},"references-count":47,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2024,4]]}},"alternative-id":["9817"],"URL":"https:\/\/doi.org\/10.1007\/s10922-024-09817-9","relation":{"has-preprint":[{"id-type":"doi","id":"10.21203\/rs.3.rs-2216855\/v1","asserted-by":"object"}]},"ISSN":["1064-7570","1573-7705"],"issn-type":[{"value":"1064-7570","type":"print"},{"value":"1573-7705","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,4]]},"assertion":[{"value":"29 October 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 July 2023","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 March 2024","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 April 2024","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical Approval"}}],"article-number":"43"}}