{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T13:21:53Z","timestamp":1771248113326,"version":"3.50.1"},"reference-count":43,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2025,8,26]],"date-time":"2025-08-26T00:00:00Z","timestamp":1756166400000},"content-version":"vor","delay-in-days":237,"URL":"http:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100013355","name":"Institut Teknologi Sepuluh Nopember","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100013355","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["International Journal of Intelligent Networks"],"published-print":{"date-parts":[[2025]]},"DOI":"10.1016\/j.ijin.2025.08.001","type":"journal-article","created":{"date-parts":[[2025,8,31]],"date-time":"2025-08-31T05:37:15Z","timestamp":1756618635000},"page":"185-203","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":1,"special_numbering":"C","title":["Improving spam botnet detection through convolutional model and geolocation feature enhancement in a novel three-class classification task"],"prefix":"10.1016","volume":"6","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-2969-2122","authenticated-orcid":false,"given":"Florentino","family":"Benedictus","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2741-6853","authenticated-orcid":false,"given":"Muhammad Aidiel Rachman","family":"Putra","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3390-0756","authenticated-orcid":false,"given":"Tohari","family":"Ahmad","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8012-7340","authenticated-orcid":false,"given":"Choiru","family":"Za\u2019in","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0829-0850","authenticated-orcid":false,"given":"Tony","family":"de Souza-Daw","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/j.ijin.2025.08.001_b1","doi-asserted-by":"crossref","DOI":"10.1016\/j.dajour.2023.100307","article-title":"A novel ensemble method for enhancing internet of things device security against botnet attacks","volume":"8","author":"Arshad","year":"2023","journal-title":"Decis. Anal. J.","ISSN":"https:\/\/id.crossref.org\/issn\/2772-6622","issn-type":"print"},{"issue":"12","key":"10.1016\/j.ijin.2025.08.001_b2","doi-asserted-by":"crossref","first-page":"5713","DOI":"10.3390\/app11125713","article-title":"Internet of things botnet detection approaches: Analysis and recommendations for future research","volume":"11","author":"Wazzan","year":"2021","journal-title":"Appl. Sci."},{"key":"10.1016\/j.ijin.2025.08.001_b3","series-title":"Improving botnet detection with recurrent neural network and transfer learning","author":"Kim","year":"2021"},{"key":"10.1016\/j.ijin.2025.08.001_b4","doi-asserted-by":"crossref","first-page":"68","DOI":"10.1016\/j.compeleceng.2014.10.010","article-title":"BotGrab: A negative reputation system for botnet detection","volume":"41","author":"Yahyazadeh","year":"2015","journal-title":"Comput. Electr. Eng.","ISSN":"https:\/\/id.crossref.org\/issn\/0045-7906","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b5","article-title":"Ensemble classification to predict botnet and its impact on IoT networks","volume":"33","author":"Swathi","year":"2024","journal-title":"Meas.: Sensors","ISSN":"https:\/\/id.crossref.org\/issn\/2665-9174","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b6","doi-asserted-by":"crossref","DOI":"10.1016\/j.measen.2022.100624","article-title":"Enhancing the security in cyber-world by detecting the botnets using ensemble classification based machine learning","volume":"25","author":"Srinivasan","year":"2023","journal-title":"Meas.: Sensors","ISSN":"https:\/\/id.crossref.org\/issn\/2665-9174","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b7","series-title":"2022 14th International Conference on Electronics, Computers and Artificial Intelligence","first-page":"1","article-title":"Design and implementation of a novel hybrid botnet","author":"Apostol","year":"2022"},{"key":"10.1016\/j.ijin.2025.08.001_b8","doi-asserted-by":"crossref","first-page":"629","DOI":"10.1016\/j.ins.2019.10.018","article-title":"A fully scalable big data framework for botnet detection based on network traffic analysis","volume":"512","author":"Mousavi","year":"2020","journal-title":"Inform. Sci.","ISSN":"https:\/\/id.crossref.org\/issn\/0020-0255","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b9","doi-asserted-by":"crossref","DOI":"10.1016\/j.jisa.2023.103629","article-title":"The evolution of mirai botnet scans over a six-year period","volume":"79","author":"Affinito","year":"2023","journal-title":"J. Inf. Secur. Appl.","ISSN":"https:\/\/id.crossref.org\/issn\/2214-2126","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b10","series-title":"Proceedings of the 2020 4th International Conference on Cryptography, Security and Privacy","first-page":"74","article-title":"A novel ensemble anomaly based approach for command and control channel detection","author":"Chen","year":"2020"},{"key":"10.1016\/j.ijin.2025.08.001_b11","series-title":"Computer and Information Security Handbook (Third Edition)","isbn-type":"print","doi-asserted-by":"crossref","first-page":"265","DOI":"10.1016\/B978-0-12-803843-7.00014-4","article-title":"Chapter 14 - the botnet problem","author":"Mims","year":"2017","ISBN":"https:\/\/id.crossref.org\/isbn\/9780128038437"},{"key":"10.1016\/j.ijin.2025.08.001_b12","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103768","article-title":"MONDEO-Tactics5G: Multistage botnet detection and tactics for 5G\/6G networks","volume":"140","author":"Sousa","year":"2024","journal-title":"Comput. Secur.","ISSN":"https:\/\/id.crossref.org\/issn\/0167-4048","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b13","series-title":"Security for Microsoft Windows System Administrators","isbn-type":"print","doi-asserted-by":"crossref","first-page":"71","DOI":"10.1016\/B978-1-59749-594-3.00003-X","article-title":"3 - network security","author":"Rountree","year":"2011","ISBN":"https:\/\/id.crossref.org\/isbn\/9781597495943"},{"issue":"1\u20137","key":"10.1016\/j.ijin.2025.08.001_b14","first-page":"27","article-title":"Machine learning for HTTP botnet detection using classifier algorithms","volume":"10","author":"Dollah","year":"2018","journal-title":"J. Telecommun. Electron. Comput. Engineering (JTEC)"},{"issue":"11","key":"10.1016\/j.ijin.2025.08.001_b15","doi-asserted-by":"crossref","first-page":"2375","DOI":"10.3390\/app9112375","article-title":"An adaptive multi-layer botnet detection technique using machine learning classifiers","volume":"9","author":"Khan","year":"2019","journal-title":"Appl. Sci."},{"key":"10.1016\/j.ijin.2025.08.001_b16","series-title":"2023 International Conference of Computer Science and Information Technology","first-page":"1","article-title":"Detecting botnet spam activity by analyzing network traffic using two-stack decision tree algorithms","author":"Putra","year":"2023"},{"key":"10.1016\/j.ijin.2025.08.001_b17","series-title":"2017 IEEE Conference on Application, Information and Network Security","first-page":"7","article-title":"Correlation-based HTTP botnet detection using network communication histogram analysis","author":"Eslahi","year":"2017"},{"key":"10.1016\/j.ijin.2025.08.001_b18","series-title":"2011 Ninth Annual International Conference on Privacy, Security and Trust","first-page":"174","article-title":"Detecting P2P botnets through network behavior analysis and machine learning","author":"Saad","year":"2011"},{"key":"10.1016\/j.ijin.2025.08.001_b19","doi-asserted-by":"crossref","first-page":"1668","DOI":"10.1016\/j.procs.2018.05.137","article-title":"Botnet detection via mining of network traffic flow","volume":"132","author":"Mathur","year":"2018","journal-title":"Procedia Comput. Sci.","ISSN":"https:\/\/id.crossref.org\/issn\/1877-0509","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b20","doi-asserted-by":"crossref","DOI":"10.1016\/j.jisa.2021.102947","article-title":"Efficient defense strategy against spam and phishing email: An evolutionary game model","volume":"61","author":"Wang","year":"2021","journal-title":"J. Inf. Secur. Appl.","ISSN":"https:\/\/id.crossref.org\/issn\/2214-2126","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b21","series-title":"Proceedings of the 6th USENIX Symposium on Networked Systems Design and Implementation","first-page":"291","article-title":"Studying spamming botnets using botlab","author":"John","year":"2009"},{"key":"10.1016\/j.ijin.2025.08.001_b22","series-title":"Fighting spam by breaking the economy of advertisment by unsolicited emails","author":"Schmidtke","year":"2015"},{"issue":"4","key":"10.1016\/j.ijin.2025.08.001_b23","doi-asserted-by":"crossref","first-page":"1338","DOI":"10.1109\/JSYST.2015.2389518","article-title":"Using geolocation for the strategic preincident preparation of an it forensics analysis","volume":"10","author":"Koch","year":"2016","journal-title":"IEEE Syst. J."},{"key":"10.1016\/j.ijin.2025.08.001_b24","series-title":"2016 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)","first-page":"170","article-title":"IP geolocation estimation using neural networks with stable landmarks","author":"Jiang","year":"2016"},{"key":"10.1016\/j.ijin.2025.08.001_b25","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2021.106887","article-title":"Network intrusion detection with a novel hierarchy of distances between embeddings of hash IP addresses","volume":"219","author":"Lopez-Martin","year":"2021","journal-title":"Knowl.-Based Syst.","ISSN":"https:\/\/id.crossref.org\/issn\/0950-7051","issn-type":"print"},{"issue":"10","key":"10.1016\/j.ijin.2025.08.001_b26","doi-asserted-by":"crossref","DOI":"10.1016\/j.jksuci.2023.101820","article-title":"Advancing IoT security: A systematic review of machine learning approaches for the detection of IoT botnets","volume":"35","author":"Nazir","year":"2023","journal-title":"J. King Saud Univ. - Comput. Inf. Sci.","ISSN":"https:\/\/id.crossref.org\/issn\/1319-1578","issn-type":"print"},{"issue":"3","key":"10.1016\/j.ijin.2025.08.001_b27","doi-asserted-by":"crossref","DOI":"10.1016\/j.kjs.2024.100222","article-title":"Developing a hybrid feature selection method to detect botnet attacks in IoT devices","volume":"51","author":"Alshaeaa","year":"2024","journal-title":"Kuwait J. Sci.","ISSN":"https:\/\/id.crossref.org\/issn\/2307-4108","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b28","doi-asserted-by":"crossref","first-page":"100","DOI":"10.1016\/j.cose.2014.05.011","article-title":"An empirical comparison of botnet detection methods","volume":"45","author":"Garc\u00eda","year":"2014","journal-title":"Comput. Secur.","ISSN":"https:\/\/id.crossref.org\/issn\/0167-4048","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b29","doi-asserted-by":"crossref","DOI":"10.1016\/j.dib.2021.107334","article-title":"Dataset for botnet group activity with adaptive generator","volume":"38","author":"Hostiadi","year":"2021","journal-title":"Data Brief","ISSN":"https:\/\/id.crossref.org\/issn\/2352-3409","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b30","doi-asserted-by":"crossref","DOI":"10.1016\/j.dib.2022.108628","article-title":"Botnet dataset with simultaneous attack activity","volume":"45","author":"Putra","year":"2022","journal-title":"Data Brief","ISSN":"https:\/\/id.crossref.org\/issn\/2352-3409","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b31","series-title":"Ipapi.is IP address databases","year":"2024"},{"issue":"2","key":"10.1016\/j.ijin.2025.08.001_b32","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1145\/1971162.1971171","article-title":"IP geolocation databases: unreliable?","volume":"41","author":"Poese","year":"2011","journal-title":"SIGCOMM Comput. Commun. Rev.","ISSN":"https:\/\/id.crossref.org\/issn\/0146-4833","issn-type":"print"},{"issue":"8","key":"10.1016\/j.ijin.2025.08.001_b33","doi-asserted-by":"crossref","first-page":"4359","DOI":"10.1109\/TMC.2022.3166785","article-title":"A deep dive into the accuracy of IP geolocation databases and its impact on online advertising","volume":"22","author":"Callejo","year":"2023","journal-title":"IEEE Trans. Mob. Comput."},{"key":"10.1016\/j.ijin.2025.08.001_b34","doi-asserted-by":"crossref","first-page":"84","DOI":"10.1016\/j.inffus.2021.11.011","article-title":"Tabular data: Deep learning is not all you need","volume":"81","author":"Shwartz-Ziv","year":"2022","journal-title":"Inf. Fusion","ISSN":"https:\/\/id.crossref.org\/issn\/1566-2535","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b35","series-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2015"},{"key":"10.1016\/j.ijin.2025.08.001_b36","series-title":"Deep residual learning for image recognition","author":"He","year":"2015"},{"key":"10.1016\/j.ijin.2025.08.001_b37","series-title":"Adam: A method for stochastic optimization","author":"Kingma","year":"2017"},{"key":"10.1016\/j.ijin.2025.08.001_b38","doi-asserted-by":"crossref","DOI":"10.1016\/j.jcmds.2024.100105","article-title":"Bayesian optimization of one-dimensional convolutional neural networks (1D CNN) for early diagnosis of autistic spectrum disorder","volume":"13","author":"Omotehinwa","year":"2024","journal-title":"J. Comput. Math. Data Sci.","ISSN":"https:\/\/id.crossref.org\/issn\/2772-4158","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b39","series-title":"SMOTE: synthetic minority over-sampling technique","author":"Bowyer","year":"2011"},{"key":"10.1016\/j.ijin.2025.08.001_b40","doi-asserted-by":"crossref","DOI":"10.1016\/j.asoc.2024.112223","article-title":"Challenges and opportunities of generative models on tabular data","volume":"166","author":"Wang","year":"2024","journal-title":"Appl. Soft Comput.","ISSN":"https:\/\/id.crossref.org\/issn\/1568-4946","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b41","series-title":"Proceedings of the 40th International Conference on Machine Learning","article-title":"Tabddpm: modelling tabular data with diffusion models","author":"Kotelnikov","year":"2023"},{"issue":"7","key":"10.1016\/j.ijin.2025.08.001_b42","doi-asserted-by":"crossref","first-page":"4219","DOI":"10.1016\/j.jksuci.2022.05.004","article-title":"Hybrid model for bot group activity detection using similarity and correlation approaches based on network traffic flows analysis","volume":"34","author":"Hostiadi","year":"2022","journal-title":"J. King Saud Univ. - Comput. Inf. Sci.","ISSN":"https:\/\/id.crossref.org\/issn\/1319-1578","issn-type":"print"},{"key":"10.1016\/j.ijin.2025.08.001_b43","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103783","article-title":"An intelligent multi-layer framework with SHAP integration for botnet detection and classification","volume":"140","author":"Gupta","year":"2024","journal-title":"Comput. Secur.","ISSN":"https:\/\/id.crossref.org\/issn\/0167-4048","issn-type":"print"}],"container-title":["International Journal of Intelligent Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2666603025000144?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2666603025000144?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T12:38:30Z","timestamp":1771245510000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2666603025000144"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":43,"alternative-id":["S2666603025000144"],"URL":"https:\/\/doi.org\/10.1016\/j.ijin.2025.08.001","relation":{},"ISSN":["2666-6030"],"issn-type":[{"value":"2666-6030","type":"print"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Improving spam botnet detection through convolutional model and geolocation feature enhancement in a novel three-class classification task","name":"articletitle","label":"Article Title"},{"value":"International Journal of Intelligent Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.ijin.2025.08.001","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2025 The Authors. Publishing services by Elsevier B.V. on behalf of KeAi Communications Co. Ltd.","name":"copyright","label":"Copyright"}]}}