{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,22]],"date-time":"2026-10-22T22:09:45Z","timestamp":1792706985178,"version":"4.5.0"},"reference-count":48,"publisher":"Springer Science and Business Media LLC","issue":"7","license":[{"start":{"date-parts":[[2019,7,13]],"date-time":"2019-07-13T00:00:00Z","timestamp":1562976000000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2019,7,13]],"date-time":"2019-07-13T00:00:00Z","timestamp":1562976000000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Ambient Intell Human Comput"],"published-print":{"date-parts":[[2020,7]]},"DOI":"10.1007\/s12652-019-01387-y","type":"journal-article","created":{"date-parts":[[2019,7,13]],"date-time":"2019-07-13T13:02:44Z","timestamp":1563022964000},"page":"2809-2825","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":192,"title":["Unsupervised intelligent system based on one class support vector machine and Grey Wolf optimization for IoT botnet detection"],"prefix":"10.1007","volume":"11","author":[{"given":"Amaal","family":"Al Shorman","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4261-8127","authenticated-orcid":false,"given":"Hossam","family":"Faris","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ibrahim","family":"Aljarah","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2019,7,13]]},"reference":[{"key":"1387_CR1","unstructured":"Angrishi K (2017) Turning internet of things (iot) into internet of vulnerabilities (iov): Iot botnets. arXiv preprint \narXiv:170203681"},{"key":"1387_CR2","doi-asserted-by":"publisher","first-page":"76","DOI":"10.1109\/MC.2017.62","volume":"2","author":"E Bertino","year":"2017","unstructured":"Bertino E, Islam N (2017a) Botnets and internet of things security. Computer 2:76\u201379","journal-title":"Computer"},{"key":"1387_CR3","doi-asserted-by":"publisher","first-page":"76","DOI":"10.1109\/MC.2017.62","volume":"2","author":"E Bertino","year":"2017","unstructured":"Bertino E, Islam N (2017b) Botnets and internet of things security. Computer 2:76\u201379","journal-title":"Computer"},{"key":"1387_CR4","doi-asserted-by":"crossref","unstructured":"Blenn N, Ghi\u00ebtte V, Doerr C (2017) Quantifying the spectrum of denial-of-service attacks through internet backscatter. In: Proceedings of the 12th international conference on availability, reliability and security, ACM, pp 1\u201310","DOI":"10.1145\/3098954.3098985"},{"key":"1387_CR5","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1016\/j.comcom.2016.12.001","volume":"98","author":"H Bostani","year":"2017","unstructured":"Bostani H, Sheikhan M (2017) Hybrid of anomaly-based and specification-based ids for internet of things using unsupervised opf based on mapreduce approach. Compute Commun 98:52\u201371","journal-title":"Compute Commun"},{"key":"1387_CR6","doi-asserted-by":"crossref","unstructured":"Butun I, Kantarci B, Erol-Kantarci M (2015) Anomaly detection and privacy preservation in cloud-centric internet of things. In: Communication workshop (ICCW), 2015 IEEE international conference on, IEEE, pp 2610\u20132615","DOI":"10.1109\/ICCW.2015.7247572"},{"key":"1387_CR7","doi-asserted-by":"crossref","unstructured":"Celebucki D, Lin MA, Graham S (2018) A security evaluation of popular internet of things protocols for manufacturers. In: Consumer electronics (ICCE), 2018 IEEE international conference on, IEEE, pp 1\u20136","DOI":"10.1109\/ICCE.2018.8326099"},{"key":"1387_CR8","unstructured":"Dheeru D, Taniskidou EK (2017) UCI machine learning repository. \nhttp:\/\/archive.ics.uci.edu\/ml\n\n. Accessed July 2018"},{"key":"1387_CR9","doi-asserted-by":"publisher","first-page":"406","DOI":"10.1016\/j.patcog.2017.09.037","volume":"74","author":"R Domingues","year":"2018","unstructured":"Domingues R, Filippone M, Michiardi P, Zouaoui J (2018) A comparative evaluation of outlier detection algorithms: experiments and analyses. Pattern Recogn 74:406\u2013421","journal-title":"Pattern Recogn"},{"issue":"3","key":"1387_CR10","doi-asserted-by":"publisher","first-page":"681","DOI":"10.1109\/TNNLS.2016.2634548","volume":"29","author":"E Emary","year":"2018","unstructured":"Emary E, Zawbaa HM, Grosan C (2018) Experienced Gray Wolf optimization through reinforcement learning and neural networks. IEEE Trans Neural Netw Learn Syst 29(3):681\u2013694","journal-title":"IEEE Trans Neural Netw Learn Syst"},{"key":"1387_CR11","doi-asserted-by":"crossref","unstructured":"Faris H, Aljarah I, Mirjalili S, Castillo PA, Guerv\u00f3s JJM (2016) Evolopy: an open-source nature-inspired optimization framework in python. In: IJCCI (ECTA), pp 171\u2013177","DOI":"10.5220\/0006048201710177"},{"key":"1387_CR12","first-page":"1","volume":"30","author":"H Faris","year":"2018","unstructured":"Faris H, Aljarah I, Al-Betar MA, Mirjalili S (2018) Grey wolf optimizer: a review of recent variants and applications. Neural Comput Appl 30:1\u201323","journal-title":"Neural Comput Appl"},{"key":"1387_CR13","first-page":"1","volume":"2019","author":"H Faris","year":"2019","unstructured":"Faris H, Mirjalili S, Aljarah I (2019) Automatic selection of hidden neurons and weights in neural networks using grey wolf optimizer based on a hybrid encoding scheme. Int J Mach Learn Cybern 2019:1\u201320","journal-title":"Int J Mach Learn Cybern"},{"issue":"5","key":"1387_CR14","doi-asserted-by":"publisher","first-page":"878","DOI":"10.1002\/sec.800","volume":"7","author":"S Garc\u00eda","year":"2014","unstructured":"Garc\u00eda S, Zunino A, Campo M (2014a) Survey on network-based botnet detection methods. Secur Commun Netw 7(5):878\u2013903","journal-title":"Secur Commun Netw"},{"issue":"5","key":"1387_CR15","doi-asserted-by":"publisher","first-page":"878","DOI":"10.1002\/sec.800","volume":"7","author":"S Garc\u00eda","year":"2014","unstructured":"Garc\u00eda S, Zunino A, Campo M (2014b) Survey on network-based botnet detection methods. Secur Commun Netw 7(5):878\u2013903","journal-title":"Secur Commun Netw"},{"key":"1387_CR16","doi-asserted-by":"crossref","unstructured":"Hallman R, Bryan J, Palavicini G, Divita J, Romero-Mariona J (2017) Ioddos the internet of distributed denial of service attacks. In: 2nd international conference on internet of things, big data and security. SCITEPRESS, pp 47\u201358","DOI":"10.5220\/0006246600470058"},{"key":"1387_CR17","volume-title":"Data mining: concepts and techniques","author":"J Han","year":"2011","unstructured":"Han J, Pei J, Kamber M (2011) Data mining: concepts and techniques. Elsevier, Amsterdam"},{"key":"1387_CR18","first-page":"1","volume":"2018","author":"N Hatta","year":"2018","unstructured":"Hatta N, Zain AM, Sallehuddin R, Shayfull Z, Yusoff Y (2018) Recent studies on optimisation method of grey wolf optimiser (gwo): a review (2014\u20132017). Artif Intell Rev 2018:1\u201333","journal-title":"Artif Intell Rev"},{"key":"1387_CR19","doi-asserted-by":"publisher","first-page":"376","DOI":"10.1016\/j.future.2014.06.001","volume":"55","author":"S Hudaa","year":"2016","unstructured":"Hudaa S, Abawajy J, Alazab M, Abdollalihian M, Islam R, Yearwood J (2016) Hybrids of support vector machine wrapper and filter based framework for malware detection [J]. Future Gener Comput Syst 55:376\u2013390","journal-title":"Future Gener Comput Syst"},{"key":"1387_CR20","doi-asserted-by":"publisher","first-page":"395","DOI":"10.1016\/j.future.2017.11.022","volume":"82","author":"MA Khan","year":"2018","unstructured":"Khan MA, Salah K (2018) Iot security: review, blockchain solutions, and open challenges. Future Gener Comput Syst 82:395\u2013411","journal-title":"Future Gener Comput Syst"},{"issue":"1\u20132","key":"1387_CR21","doi-asserted-by":"publisher","first-page":"273","DOI":"10.1016\/S0004-3702(97)00043-X","volume":"97","author":"R Kohavi","year":"1997","unstructured":"Kohavi R, John GH (1997) Wrappers for feature subset selection. Artif Intell 97(1\u20132):273\u2013324","journal-title":"Artif Intell"},{"issue":"7","key":"1387_CR22","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1109\/MC.2017.201","volume":"50","author":"C Kolias","year":"2017","unstructured":"Kolias C, Kambourakis G, Stavrou A, Voas J (2017a) Ddos in the IoT: Mirai and other botnets. Computer 50(7):80\u201384","journal-title":"Computer"},{"issue":"7","key":"1387_CR23","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1109\/MC.2017.201","volume":"50","author":"C Kolias","year":"2017","unstructured":"Kolias C, Kambourakis G, Stavrou A, Voas J (2017b) Ddos in the IoT: Mirai and other botnets. Computer 50(7):80\u201384","journal-title":"Computer"},{"key":"1387_CR24","doi-asserted-by":"crossref","unstructured":"Lazarevic A, Ertoz L, Kumar V, Ozgur A, Srivastava J (2003) A comparative study of anomaly detection schemes in network intrusion detection. In: Proceedings of the 2003 SIAM international conference on data mining, SIAM, pp 25\u201336","DOI":"10.1137\/1.9781611972733.3"},{"key":"1387_CR25","volume":"2014","author":"K-C Lin","year":"2014","unstructured":"Lin K-C, Chen S-Y, Hung JC (2014) Botnet detection using support vector machines with artificial fish swarm algorithm. J Appl Math 2014:986428","journal-title":"J Appl Math"},{"issue":"11","key":"1387_CR26","doi-asserted-by":"publisher","first-page":"7","DOI":"10.1016\/S1353-4858(16)30104-0","volume":"2016","author":"S Mansfield-Devine","year":"2016","unstructured":"Mansfield-Devine S (2016) Ddos goes mainstream: how headline-grabbing attacks could make this threat an organisation\u2019s biggest nightmare. Netw Secur 2016(11):7\u201313","journal-title":"Netw Secur"},{"issue":"9","key":"1387_CR27","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1109\/MPRV.2018.03367731","volume":"13","author":"Y Meidan","year":"2018","unstructured":"Meidan Y, Bohadana M, Mathov Y, Mirsky Y, Breitenbacher D, Shabtai A, Elovici Y (2018) N-baiot: Network-based detection of IoT botnet attacks using deep autoencoders. IEEE Pervasive Comput 13(9):12\u201322","journal-title":"IEEE Pervasive Comput"},{"key":"1387_CR28","doi-asserted-by":"crossref","unstructured":"Midi D, Rullo A, Mudgerikar A, Bertino E (2017) Kalis\u2014a system for knowledge-driven adaptable intrusion detection for the internet of things. In: Distributed computing systems (ICDCS), 2017 IEEE 37th international conference on IEEE, pp 656\u2013666","DOI":"10.1109\/ICDCS.2017.104"},{"key":"1387_CR29","doi-asserted-by":"crossref","first-page":"46","DOI":"10.1016\/j.advengsoft.2013.12.007","volume":"69","author":"S Mirjalili","year":"2014","unstructured":"Mirjalili S, Mirjalili SM, Lewis A (2014) Grey Wolf optimizer. Adv Eng Softw 69:46\u201361","journal-title":"Adv Eng Softw"},{"key":"1387_CR30","doi-asserted-by":"crossref","unstructured":"Mirsky Y, Doitshman T, Elovici Y, Shabtai A (2018) Kitsune: an ensemble of autoencoders for online network intrusion detection. arXiv preprint \narXiv:180209089","DOI":"10.14722\/ndss.2018.23204"},{"issue":"3","key":"1387_CR31","doi-asserted-by":"publisher","first-page":"584","DOI":"10.1016\/j.patcog.2009.09.003","volume":"43","author":"MH Nguyen","year":"2010","unstructured":"Nguyen MH, De la Torre F (2010) Optimal feature selection for support vector machines. Pattern Recogn 43(3):584\u2013591","journal-title":"Pattern Recogn"},{"key":"1387_CR32","doi-asserted-by":"crossref","unstructured":"Ozcelik M, Chalabianloo N, Gur G (2017) Software-defined edge defense against IoT-based ddos. In: 2017 IEEE International conference on computer and information technology (CIT), IEEE, pp 308\u2013313","DOI":"10.1109\/CIT.2017.61"},{"key":"1387_CR33","first-page":"1","volume":"9","author":"YMP Pa","year":"2015","unstructured":"Pa YMP, Suzuki S, Yoshioka K, Matsumoto T, Kasama T, Rossow C (2015) Iotpot: analysing the rise of IoT compromises. EMU 9:1","journal-title":"EMU"},{"issue":"7","key":"1387_CR34","doi-asserted-by":"publisher","first-page":"1443","DOI":"10.1162\/089976601750264965","volume":"13","author":"B Sch\u00f6lkopf","year":"2001","unstructured":"Sch\u00f6lkopf B, Platt JC, Shawe-Taylor J, Smola AJ, Williamson RC (2001a) Estimating the support of a high-dimensional distribution. Neural Comput 13(7):1443\u20131471","journal-title":"Neural Comput"},{"issue":"7","key":"1387_CR35","doi-asserted-by":"publisher","first-page":"1443","DOI":"10.1162\/089976601750264965","volume":"13","author":"B Sch\u00f6lkopf","year":"2001","unstructured":"Sch\u00f6lkopf B, Platt JC, Shawe-Taylor J, Smola AJ, Williamson RC (2001b) Estimating the support of a high-dimensional distribution. Neural Comput 13(7):1443\u20131471","journal-title":"Neural Comput"},{"key":"1387_CR36","doi-asserted-by":"crossref","unstructured":"Sedjelmaci H, Senouci SM, Al-Bahri M (2016) A lightweight anomaly detection technique for low-resource IoT devices: a game-theoretic methodology. In: Communications (ICC), 2016 IEEE international conference on IEEE, pp 1\u20136","DOI":"10.1109\/ICC.2016.7510811"},{"issue":"4","key":"1387_CR37","first-page":"13","volume":"5","author":"C Shearer","year":"2000","unstructured":"Shearer C (2000) The crisp$$-$$dm model: the new blueprint for data mining. J Data Warehosusing 5(4):13\u201322","journal-title":"J Data Warehosusing"},{"key":"1387_CR38","doi-asserted-by":"crossref","unstructured":"Summerville DH, Zach KM, Chen Y (2015) Ultra-lightweight deep packet anomaly detection for internet of things devices. In: Computing and communications conference (IPCCC), 2015 IEEE 34th international performance, IEEE, pp 1\u20138","DOI":"10.1109\/PCCC.2015.7410342"},{"key":"1387_CR39","doi-asserted-by":"publisher","first-page":"130","DOI":"10.1016\/j.knosys.2017.09.014","volume":"136","author":"H Wang","year":"2017","unstructured":"Wang H, Gu J, Wang S (2017) An effective intrusion detection framework based on svm with feature augmentation. Knowl Based Syst 136:130\u2013139","journal-title":"Knowl Based Syst"},{"key":"1387_CR40","unstructured":"Weston J, Mukherjee S, Chapelle O, Pontil M, Poggio T, Vapnik V (2001) Feature selection for svms. In: Advances in neural information processing systems, pp 668\u2013674"},{"issue":"2","key":"1387_CR41","doi-asserted-by":"publisher","first-page":"261","DOI":"10.1007\/s10796-014-9489-2","volume":"17","author":"A Whitmore","year":"2015","unstructured":"Whitmore A, Agarwal A, Da Xu L (2015) The internet of things\u2014a survey of topics and trends. Inf Syst Front 17(2):261\u2013274","journal-title":"Inf Syst Front"},{"issue":"1","key":"1387_CR42","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1109\/4235.585893","volume":"1","author":"DH Wolpert","year":"1997","unstructured":"Wolpert DH, Macready WG (1997) No free lunch theorems for optimization. IEEE Trans Evol Comput 1(1):67\u201382","journal-title":"IEEE Trans Evol Comput"},{"key":"1387_CR43","unstructured":"Wu G, Chang EY (2003) Class-boundary alignment for imbalanced dataset learning. ICML 2003 workshop on learning from imbalanced data sets II., Washington DC, pp 49\u201356"},{"issue":"11","key":"1387_CR44","doi-asserted-by":"publisher","first-page":"2088","DOI":"10.1109\/TPAMI.2009.24","volume":"31","author":"M Wu","year":"2009","unstructured":"Wu M, Ye J (2009) A small sphere and large margin approach for novelty detection using training data with outliers. IEEE Trans Pattern Anal Mach Intell 31(11):2088\u20132092","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"key":"1387_CR45","doi-asserted-by":"publisher","first-page":"75","DOI":"10.1016\/j.knosys.2014.01.020","volume":"59","author":"Y Xiao","year":"2014","unstructured":"Xiao Y, Wang H, Zhang L, Xu W (2014) Two methods of selecting gaussian kernel parameters for one-class svm and their application to fault detection. Knowl Based Syst 59:75\u201384","journal-title":"Knowl Based Syst"},{"issue":"5","key":"1387_CR46","doi-asserted-by":"publisher","first-page":"941","DOI":"10.1109\/TCYB.2014.2340433","volume":"45","author":"Y Xiao","year":"2015","unstructured":"Xiao Y, Wang H, Xu W (2015) Parameter selection of gaussian kernel for one-class svm. IEEE Trans Cybern 45(5):941\u2013953","journal-title":"IEEE Trans Cybern"},{"issue":"2","key":"1387_CR47","doi-asserted-by":"publisher","first-page":"77","DOI":"10.1504\/IJBIC.2011.039907","volume":"3","author":"XS Yang","year":"2011","unstructured":"Yang XS (2011) Review of metaheuristics and generalized evolutionary walk algorithm. Int J Bio-Inspired Comput 3(2):77\u201384","journal-title":"Int J Bio-Inspired Comput"},{"key":"1387_CR48","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1016\/j.compeleceng.2017.09.028","volume":"65","author":"X Zou","year":"2018","unstructured":"Zou X, Cao J, Guo Q, Wen T (2018) A novel network security algorithm based on improved support vector machine from smart city perspective. Comput Electr Eng 65:67\u201378","journal-title":"Comput Electr Eng"}],"container-title":["Journal of Ambient Intelligence and Humanized Computing"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s12652-019-01387-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s12652-019-01387-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s12652-019-01387-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,7,11]],"date-time":"2020-07-11T23:16:02Z","timestamp":1594509362000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s12652-019-01387-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,7,13]]},"references-count":48,"journal-issue":{"issue":"7","published-print":{"date-parts":[[2020,7]]}},"alternative-id":["1387"],"URL":"https:\/\/doi.org\/10.1007\/s12652-019-01387-y","relation":{},"ISSN":["1868-5137","1868-5145"],"issn-type":[{"value":"1868-5137","type":"print"},{"value":"1868-5145","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,7,13]]},"assertion":[{"value":"23 February 2019","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 July 2019","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"13 July 2019","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with ethical standards"}},{"value":"There is no conflict of interest to declare.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"This article does not contain any studies with human participants or animals performed by any of the authors.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical standards"}}]}}