{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,10]],"date-time":"2026-04-10T04:54:18Z","timestamp":1775796858993,"version":"3.50.1"},"reference-count":46,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2026,3,4]],"date-time":"2026-03-04T00:00:00Z","timestamp":1772582400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2026,4,10]],"date-time":"2026-04-10T00:00:00Z","timestamp":1775779200000},"content-version":"vor","delay-in-days":37,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Sci Rep"],"DOI":"10.1038\/s41598-026-40172-8","type":"journal-article","created":{"date-parts":[[2026,3,4]],"date-time":"2026-03-04T07:51:57Z","timestamp":1772610717000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Application of representation learning in detecting botnet attacks"],"prefix":"10.1038","volume":"16","author":[{"given":"Hieu","family":"Le Ngoc","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,3,4]]},"reference":[{"key":"40172_CR1","doi-asserted-by":"publisher","first-page":"11792","DOI":"10.1109\/access.2025.3526711","volume":"13","author":"T Al-Shurbaji","year":"2025","unstructured":"Al-Shurbaji, T. et al. Deep learning-based intrusion detection system for detecting IoT botnet attacks: A review. IEEE Access 13, 11792\u201311822. https:\/\/doi.org\/10.1109\/access.2025.3526711 (2025).","journal-title":"IEEE Access"},{"key":"40172_CR2","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2022.3183361","author":"PP Kundu","year":"2024","unstructured":"Kundu, P. P., Truong-Huu, T., Chen, L., Zhou, L. & Teo, S. G. Detection and classification of botnet traffic using deep learning with model explanation. IEEE Trans. Dependable Secure Comput. https:\/\/doi.org\/10.1109\/tdsc.2022.3183361 (2024).","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"40172_CR3","doi-asserted-by":"crossref","unstructured":"Ahmed, A., and Tjortjis, C. Machine learning based IoT-BotNet attack detection using real-time heterogeneous data. In 2022 International Conference on Electrical, Computer and Energy Technologies (ICECET) (2022).","DOI":"10.1109\/ICECET55527.2022.9872817"},{"key":"40172_CR4","doi-asserted-by":"crossref","unstructured":"Nketia, I. K., Yaokumah, W., & Appati, J. K. A comprehensive review of internet-of-things (IoT) botnet detection techniques. In Smart and Agile Cybersecurity for IoT and IIoT Environments 50\u201381. (IGI Global, 2024).","DOI":"10.4018\/979-8-3693-3451-5.ch003"},{"issue":"5","key":"40172_CR5","doi-asserted-by":"publisher","first-page":"185","DOI":"10.14445\/22315381\/ijett-v70i5p220","volume":"70","author":"F Suthar","year":"2022","unstructured":"Suthar, F., Patel, N. & Khanna, S. V. O. A signature-based botnet (emotet) detection mechanism. Int. J. Eng. Trends Technol. 70(5), 185\u2013193. https:\/\/doi.org\/10.14445\/22315381\/ijett-v70i5p220 (2022).","journal-title":"Int. J. Eng. Trends Technol."},{"issue":"15","key":"40172_CR6","doi-asserted-by":"publisher","DOI":"10.3390\/electronics12153300","volume":"12","author":"M Saeed","year":"2023","unstructured":"Saeed, M. et al. Anomaly detection in 6G networks using machine learning methods. Electronics 12(15), 3300. https:\/\/doi.org\/10.3390\/electronics12153300 (2023).","journal-title":"Electronics"},{"issue":"1","key":"40172_CR7","doi-asserted-by":"publisher","first-page":"57","DOI":"10.1177\/1548512920951275","volume":"19","author":"D Dasgupta","year":"2022","unstructured":"Dasgupta, D., Akhtar, Z. & Sen, S. Machine learning in cybersecurity: A comprehensive survey. J. Def. Model. Simul. Appl. Methodol. Technol. 19(1), 57\u2013106. https:\/\/doi.org\/10.1177\/1548512920951275 (2022).","journal-title":"J. Def. Model. Simul. Appl. Methodol. Technol."},{"key":"40172_CR8","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1155\/2021\/6640499","volume":"2021","author":"Y Xing","year":"2021","unstructured":"Xing, Y., Shu, H., Zhao, H., Li, D. & Guo, L. Survey on botnet detection techniques: Classification, methods, and evaluation. Math. Probl. Eng. 2021, 1\u201324. https:\/\/doi.org\/10.1155\/2021\/6640499 (2021).","journal-title":"Math. Probl. Eng."},{"key":"40172_CR9","doi-asserted-by":"crossref","unstructured":"Awad, L., Al-HajBaddar, S., & Sleit, A. Machine learning and deep learning for botnet detection techniques: A comparative review. In Lecture Notes in Networks and Systems 401\u2013412. (Springer Nature Switzerland, 2023).","DOI":"10.1007\/978-3-032-07995-4_27"},{"key":"40172_CR10","doi-asserted-by":"crossref","unstructured":"Alomari, D., Anis, F., Alabdullatif, M., & Aljamaan, H. A survey on botnets attack detection utilizing machine and deep learning models. In Proceedings of the 27th International Conference on Evaluation and Assessment in Software Engineering, 493\u2013498 (2023).","DOI":"10.1145\/3593434.3593967"},{"key":"40172_CR11","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2021.100389","volume":"40","author":"L Aversano","year":"2021","unstructured":"Aversano, L., Bernardi, M. L., Cimitile, M. & Pecori, R. A systematic review on Deep Learning approaches for IoT security. Comput. Sci. Rev. 40, 100389. https:\/\/doi.org\/10.1016\/j.cosrev.2021.100389 (2021).","journal-title":"Comput. Sci. Rev."},{"key":"40172_CR12","doi-asserted-by":"publisher","first-page":"88","DOI":"10.1016\/j.aej.2024.05.113","volume":"103","author":"S Ali","year":"2024","unstructured":"Ali, S. et al. A novel approach of botnet detection using hybrid deep learning for enhancing security in IoT networks. Alex. Eng. J. 103, 88\u201397. https:\/\/doi.org\/10.1016\/j.aej.2024.05.113 (2024).","journal-title":"Alex. Eng. J."},{"key":"40172_CR13","doi-asserted-by":"publisher","DOI":"10.1007\/s12083-025-01947-4","author":"E Emirmahmuto\u011flu","year":"2025","unstructured":"Emirmahmuto\u011flu, E. & Atay, Y. A feature selection-driven machine learning framework for anomaly-based intrusion detection systems. Peer-to-Peer Netw. Appl. https:\/\/doi.org\/10.1007\/s12083-025-01947-4 (2025).","journal-title":"Peer-to-Peer Netw. Appl."},{"issue":"1","key":"40172_CR14","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-025-85866-7","volume":"15","author":"U Ahmed","year":"2025","unstructured":"Ahmed, U. et al. Signature-based intrusion detection using machine learning and deep learning approaches empowered with fuzzy clustering. Sci. Rep. 15(1), 1726. https:\/\/doi.org\/10.1038\/s41598-025-85866-7 (2025).","journal-title":"Sci. Rep."},{"key":"40172_CR15","doi-asserted-by":"publisher","DOI":"10.52866\/ijcsm.2023.01.01.008","author":"MM Mijwil","year":"2023","unstructured":"Mijwil, M. M., Salem, I. E. & Ismaeel, M. M. The significance of machine learning and deep learning techniques in cybersecurity: A comprehensive review. Iraqi J. Comput. Sci. Math. https:\/\/doi.org\/10.52866\/ijcsm.2023.01.01.008 (2023).","journal-title":"Iraqi J. Comput. Sci. Math."},{"issue":"6","key":"40172_CR16","doi-asserted-by":"publisher","DOI":"10.3390\/technologies11060161","volume":"11","author":"A Alnajim","year":"2023","unstructured":"Alnajim, A., Habib, S., Islam, M., Thwin, S. & Alotaibi, F. A comprehensive survey of cybersecurity threats, attacks, and effective countermeasures in Industrial Internet of Things. Technologies 11(6), 161. https:\/\/doi.org\/10.3390\/technologies11060161 (2023).","journal-title":"Technologies"},{"key":"40172_CR17","doi-asserted-by":"crossref","unstructured":"Alshamkhany, M., Alshamkhany, W., Mansour, M., Khan, M., Dhou, S., & Aloul, F. Botnet Attack detection using machine learning. In 2020 14th International Conference on Innovations in Information Technology (IIT) (2020).","DOI":"10.1109\/IIT50501.2020.9299061"},{"key":"40172_CR18","doi-asserted-by":"publisher","unstructured":"Pokhrel, S., Abbas, R., & Aryal, B. IoT Security: Botnet detection in IoT using Machine learning. arXiv:2104.02231. https:\/\/doi.org\/10.48550\/ARXIV.2104.02231. (2021).","DOI":"10.48550\/ARXIV.2104.02231"},{"issue":"2","key":"40172_CR19","doi-asserted-by":"publisher","first-page":"1153","DOI":"10.1109\/comst.2015.2494502","volume":"18","author":"AL Buczak","year":"2016","unstructured":"Buczak, A. L. & Guven, E. A survey of data mining and machine learning methods for cyber security intrusion detection. IEEE Commun. Surv. Tutor. 18(2), 1153\u20131176. https:\/\/doi.org\/10.1109\/comst.2015.2494502 (2016).","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"40172_CR20","doi-asserted-by":"publisher","DOI":"10.3389\/fcomp.2025.1520741","author":"VZ Mohale","year":"2025","unstructured":"Mohale, V. Z. & Obagbuwa, I. C. Evaluating machine learning-based intrusion detection systems with explainable AI: Enhancing transparency and interpretability. Front. Comput. Sci. https:\/\/doi.org\/10.3389\/fcomp.2025.1520741 (2025).","journal-title":"Front. Comput. Sci."},{"key":"40172_CR21","unstructured":"Raghava, N. S., & Sahgal, D. (2012). Botnet: A deadly threat to cyber security. Int. J. Comput. Appl., 44(2)."},{"key":"40172_CR22","doi-asserted-by":"publisher","DOI":"10.1002\/ett.4150","author":"Z Ahmad","year":"2021","unstructured":"Ahmad, Z., Shahid Khan, A., Wai Shiang, C., Abdullah, J. & Ahmad, F. Network intrusion detection system: A systematic study of machine learning and deep learning approaches. Trans. Emerg. Telecommun. Technol. https:\/\/doi.org\/10.1002\/ett.4150 (2021).","journal-title":"Trans. Emerg. Telecommun. Technol."},{"key":"40172_CR23","doi-asserted-by":"publisher","first-page":"164097","DOI":"10.1109\/access.2024.3493384","volume":"12","author":"AH Janabi","year":"2024","unstructured":"Janabi, A. H., Kanakis, T. & Johnson, M. Survey: Intrusion detection system in software-defined networking. IEEE Access 12, 164097\u2013164120. https:\/\/doi.org\/10.1109\/access.2024.3493384 (2024).","journal-title":"IEEE Access"},{"key":"40172_CR24","unstructured":"Chen, Z. Detection of IoT botnets using decision trees (Doctoral dissertation). ProQuest Dissertations and Theses (2021). https:\/\/www.proquest.com\/openview\/0e58828dd5d3ff63e47cbc0618cd1baf\/1?pq-origsite=gscholar&cbl=18750&diss=y."},{"issue":"2","key":"40172_CR25","doi-asserted-by":"publisher","first-page":"201","DOI":"10.32890\/jict2022.21.2.3","volume":"21","author":"NS Akash","year":"2022","unstructured":"Akash, N. S., Rouf, S., Jahan, S., Chowdhury, A. & Uddin, J. Botnet detection in IoT devices using Random Forest Classifier with Independent Component Analysis. J. ICT 21(2), 201\u2013232. https:\/\/doi.org\/10.32890\/jict2022.21.2.3 (2022).","journal-title":"J. ICT"},{"key":"40172_CR26","doi-asserted-by":"crossref","unstructured":"Fang, W. Real time botnet detection system based on machine learning algorithms. In L. Shen (Ed.), 2022 2nd Conference on High Performance Computing and Communication Engineering (HPCCE 2022) 44 (SPIE, 2023).","DOI":"10.1117\/12.2673313"},{"issue":"4","key":"40172_CR27","doi-asserted-by":"publisher","first-page":"441","DOI":"10.1080\/19393555.2021.1934198","volume":"31","author":"XD Hoang","year":"2022","unstructured":"Hoang, X. D. & Vu, X. H. An improved model for detecting DGA botnets using random forest algorithm. Inf. Secur. J. Glob. Perspect. 31(4), 441\u2013450. https:\/\/doi.org\/10.1080\/19393555.2021.1934198 (2022).","journal-title":"Inf. Secur. J. Glob. Perspect."},{"key":"40172_CR28","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-020-00046-6","author":"F Ren","year":"2020","unstructured":"Ren, F., Jiang, Z., Wang, X. & Liu, J. A DGA domain names detection modeling method based on integrating an attention mechanism and deep neural network. Cybersecurity https:\/\/doi.org\/10.1186\/s42400-020-00046-6 (2020).","journal-title":"Cybersecurity"},{"key":"40172_CR29","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1016\/j.aej.2024.01.073","volume":"91","author":"NO Aljehane","year":"2024","unstructured":"Aljehane, N. O. et al. Optimizing intrusion detection using intelligent feature selection with machine learning model. Alex. Eng. J. 91, 39\u201349. https:\/\/doi.org\/10.1016\/j.aej.2024.01.073 (2024).","journal-title":"Alex. Eng. J."},{"key":"40172_CR30","doi-asserted-by":"publisher","first-page":"38597","DOI":"10.1109\/access.2019.2905633","volume":"7","author":"SM Kasongo","year":"2019","unstructured":"Kasongo, S. M. & Sun, Y. A deep learning method with filter based feature engineering for wireless intrusion detection system. IEEE Access 7, 38597\u201338607. https:\/\/doi.org\/10.1109\/access.2019.2905633 (2019).","journal-title":"IEEE Access"},{"key":"40172_CR31","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1155\/2021\/3806459","volume":"2021","author":"H Alkahtani","year":"2021","unstructured":"Alkahtani, H. & Aldhyani, T. H. H. Botnet attack detection by using CNN-LSTM model for Internet of Things applications. Secur. Commun. Networks 2021, 1\u201323. https:\/\/doi.org\/10.1155\/2021\/3806459 (2021).","journal-title":"Secur. Commun. Networks"},{"issue":"16","key":"40172_CR32","doi-asserted-by":"publisher","DOI":"10.3390\/app12167986","volume":"12","author":"EUH Qazi","year":"2022","unstructured":"Qazi, E. U. H., Almorjan, A. & Zia, T. A one-dimensional convolutional neural network (1D-CNN) based deep learning system for network intrusion detection. Appl. Sci. 12(16), 7986. https:\/\/doi.org\/10.3390\/app12167986 (2022).","journal-title":"Appl. Sci."},{"key":"40172_CR33","doi-asserted-by":"crossref","unstructured":"Gueriani, A., Kheddar, H., & Mazari, A. C. Enhancing IoT security with CNN and LSTM-based intrusion detection systems. In 2024 6th International Conference on Pattern Analysis and Intelligent Systems (PAIS) (2024)","DOI":"10.1109\/PAIS62114.2024.10541178"},{"issue":"2","key":"40172_CR34","doi-asserted-by":"publisher","first-page":"1","DOI":"10.33897\/fujeas.v4i2.779","volume":"4","author":"AA Soofi","year":"2024","unstructured":"Soofi, A. A., Tahir, M. & Raza, N. Securing the Internet of Things: A comprehensive review of security challenges and artificial intelligence solutions. Found. Univ. J. Eng. Appl. Sci. 4(2), 1\u201320. https:\/\/doi.org\/10.33897\/fujeas.v4i2.779 (2024).","journal-title":"Found. Univ. J. Eng. Appl. Sci."},{"issue":"11","key":"40172_CR35","doi-asserted-by":"publisher","DOI":"10.3390\/s24113509","volume":"24","author":"IA Alwhbi","year":"2024","unstructured":"Alwhbi, I. A., Zou, C. C. & Alharbi, R. N. Encrypted network traffic analysis and classification utilizing machine learning. Sensors 24(11), 3509. https:\/\/doi.org\/10.3390\/s24113509 (2024).","journal-title":"Sensors"},{"issue":"4","key":"40172_CR36","doi-asserted-by":"publisher","first-page":"2545","DOI":"10.1109\/jiot.2021.3077803","volume":"9","author":"V Mothukuri","year":"2022","unstructured":"Mothukuri, V. et al. Federated-learning-based anomaly detection for IoT security attacks. IEEE Internet Things J. 9(4), 2545\u20132554. https:\/\/doi.org\/10.1109\/jiot.2021.3077803 (2022).","journal-title":"IEEE Internet Things J."},{"key":"40172_CR37","doi-asserted-by":"publisher","unstructured":"Nguyen, T. D., Marchal, S., Miettinen, M., Fereidooni, H., Asokan, N., & Sadeghi, A.-R. D\u00cfoT: A federated self-learning anomaly detection system for IoT. In 2019 IEEE 39th International Conference on Distributed Computing Systems (ICDCS). https:\/\/doi.org\/10.1109\/ICDCS.2019.00080 (2019).","DOI":"10.1109\/ICDCS.2019.00080"},{"key":"40172_CR38","doi-asserted-by":"publisher","unstructured":"Vinayakumar, R., Alazab, M., Soman, K. P., Poongodi, P., & Al-Turjman, F. Deep learning for cyber security applications: A comprehensive survey. https:\/\/doi.org\/10.36227\/techrxiv.16748161.v1. (2021).","DOI":"10.36227\/techrxiv.16748161.v1"},{"key":"40172_CR39","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102537","volume":"112","author":"W Wang","year":"2022","unstructured":"Wang, W., Jian, S., Tan, Y., Wu, Q. & Huang, C. Representation learning-based network intrusion detection system by capturing explicit and implicit feature interactions. Comput. Secur. 112, 102537. https:\/\/doi.org\/10.1016\/j.cose.2021.102537 (2022).","journal-title":"Comput. Secur."},{"key":"40172_CR40","doi-asserted-by":"publisher","first-page":"97780","DOI":"10.1109\/access.2022.3200034","volume":"10","author":"CMK Ho","year":"2022","unstructured":"Ho, C. M. K., Yow, K.-C., Zhu, Z. & Aravamuthan, S. Network intrusion detection via flow-to-image conversion and vision transformer classification. IEEE Access 10, 97780\u201397793. https:\/\/doi.org\/10.1109\/access.2022.3200034 (2022).","journal-title":"IEEE Access"},{"issue":"18","key":"40172_CR41","doi-asserted-by":"publisher","first-page":"11499","DOI":"10.1007\/s00521-021-05816-y","volume":"33","author":"K Bakour","year":"2021","unstructured":"Bakour, K. & \u00dcnver, H. M. DeepVisDroid: Android malware detection by hybridizing image-based features with deep learning techniques. Neural Comput. Appl. 33(18), 11499\u201311516. https:\/\/doi.org\/10.1007\/s00521-021-05816-y (2021).","journal-title":"Neural Comput. Appl."},{"issue":"1","key":"40172_CR42","doi-asserted-by":"publisher","first-page":"791","DOI":"10.1109\/comst.2022.3208196","volume":"25","author":"M Shen","year":"2023","unstructured":"Shen, M. et al. Machine learning-powered encrypted network traffic analysis: A comprehensive survey. IEEE Commun. Surv. Tutor. 25(1), 791\u2013824. https:\/\/doi.org\/10.1109\/comst.2022.3208196 (2023).","journal-title":"IEEE Commun. Surv. Tutor."},{"issue":"5","key":"40172_CR43","doi-asserted-by":"publisher","DOI":"10.3390\/app13052754","volume":"13","author":"T Kim","year":"2023","unstructured":"Kim, T. & Pak, W. Deep learning-based network intrusion detection using multiple image transformers. Appl. Sci. 13(5), 2754. https:\/\/doi.org\/10.3390\/app13052754 (2023).","journal-title":"Appl. Sci."},{"issue":"15","key":"40172_CR44","doi-asserted-by":"publisher","DOI":"10.3390\/s22155621","volume":"22","author":"E Rodr\u00edguez","year":"2022","unstructured":"Rodr\u00edguez, E. et al. Transfer-learning-based intrusion detection framework in IoT networks. Sensors 22(15), 5621. https:\/\/doi.org\/10.3390\/s22155621 (2022).","journal-title":"Sensors"},{"key":"40172_CR45","doi-asserted-by":"publisher","first-page":"100","DOI":"10.1016\/j.cose.2014.05.011","volume":"45","author":"S Garcia","year":"2014","unstructured":"Garcia, S., Grill, M., Stiborek, J. & Zunino, A. An empirical comparison of botnet detection methods. Comput. Secur. 45, 100\u2013123 (2014).","journal-title":"Comput. Secur."},{"key":"40172_CR46","doi-asserted-by":"publisher","unstructured":"He, K., Zhang, X., Ren, S., & Sun, J. Deep residual learning for image recognition. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR), 770\u2013778. https:\/\/doi.org\/10.1109\/CVPR.2016.90 (2016).","DOI":"10.1109\/CVPR.2016.90"}],"container-title":["Scientific Reports"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.nature.com\/articles\/s41598-026-40172-8","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s41598-026-40172-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s41598-026-40172-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,10]],"date-time":"2026-04-10T03:59:27Z","timestamp":1775793567000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.nature.com\/articles\/s41598-026-40172-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,4]]},"references-count":46,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2026,12]]}},"alternative-id":["40172"],"URL":"https:\/\/doi.org\/10.1038\/s41598-026-40172-8","relation":{},"ISSN":["2045-2322"],"issn-type":[{"value":"2045-2322","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,3,4]]},"assertion":[{"value":"13 November 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"11 February 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 March 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"11977"}}