{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T22:59:20Z","timestamp":1773874760706,"version":"3.50.1"},"reference-count":41,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/OAPA.html"}],"funder":[{"DOI":"10.13039\/100012823","name":"Telecommunications Regulatory Authority","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100012823","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2019]]},"DOI":"10.1109\/access.2019.2919680","type":"journal-article","created":{"date-parts":[[2019,5,29]],"date-time":"2019-05-29T15:46:16Z","timestamp":1559144776000},"page":"71780-71790","source":"Crossref","is-referenced-by-count":6,"title":["Collaborative Framework for Early Detection of RAT-Bots Attacks"],"prefix":"10.1109","volume":"7","author":[{"given":"Ahmed A.","family":"Awad","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7259-3296","authenticated-orcid":false,"given":"Samir G.","family":"Sayed","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7553-4002","authenticated-orcid":false,"given":"Sameh A.","family":"Salem","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","first-page":"8","article-title":"Rishi: Identify bot contaminated hosts by irc nickname evaluation","author":"goebel","year":"2007","journal-title":"USENIX Workshop on Hot Topics in Understanding Botnets (HotBots07)"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ISDA.2012.6416624"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CyberC.2012.40"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICACT.2013.6710523"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICPES.2011.6156687"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2014.03.066"},{"key":"ref37","first-page":"6","article-title":"Challenges in experimenting with botnet detection systems","author":"aviv","year":"2011","journal-title":"Proc of the 4th Conf on Cyber Security Experimentation and Test"},{"key":"ref36","year":"2019","journal-title":"Last visited"},{"key":"ref35","year":"2018","journal-title":"Last visited"},{"key":"ref34","first-page":"16","article-title":"Na&#x00EF;ve Bayes vs. Decision Trees vs. neural networks in the classification of training Web pages","volume":"4","author":"xhemali","year":"2009","journal-title":"Int J Comput Sci Issues"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/AsiaJCIS.2017.13"},{"key":"ref40","first-page":"1","article-title":"BotSniffer: Detecting botnet command and control channels in network traffic","author":"gu","year":"2008","journal-title":"Proc 16th Annu Netw Distrib Syst Secur Symp"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/s11859-013-0944-6"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2016.7841017"},{"key":"ref13","author":"gu","year":"2007","journal-title":"Bothunter Detecting malware infection through ids-driven dialog correlation"},{"key":"ref14","first-page":"139","article-title":"BotMiner: Clustering analysis of network traffic for protocol- and structure-independent botnet detection","volume":"8","author":"gu","year":"2008","journal-title":"Proc 17th Conf Security Symp"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICITST.2015.7412113"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ANCS.2017.27"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.48"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-73614-1_6"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-68768-1_4"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/FTC.2016.7821774"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICMCS.2012.6320256"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2018.8406293"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1631\/jzus.C1300242"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2846740"},{"key":"ref29","first-page":"735","article-title":"Malware detection using machine learning","author":"gavrilu?","year":"2009","journal-title":"Proc Int Multiconf Comput Sci Inf Technol"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2501654.2501659"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/COMAPP.2017.8079775"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/IEMCON.2017.8117169"},{"key":"ref2","first-page":"404","article-title":"Contactless vulnerability analysis using Google and shodan","volume":"23","author":"simon","year":"2017","journal-title":"J Universal Comput Sci"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2015.257"},{"key":"ref1","first-page":"567","article-title":"On the Analysis and Detection of Mobile Botnet Applications","volume":"22","author":"karim","year":"2016","journal-title":"J Universal Comput Sci"},{"key":"ref20","first-page":"363","article-title":"BINDER: An extrusion-based break-in detector for personal computers","volume":"5","author":"cui","year":"2005","journal-title":"Proc USENIX Annu Tech Conf (ATEC)"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/AsiaJCIS.2016.17"},{"key":"ref21","first-page":"161","author":"law","year":"2010","journal-title":"A Host-Based Approach to BotNet Investigation Berlin"},{"key":"ref24","first-page":"291","article-title":"Detection of botnets using combined host- and network-level informati","author":"zeng","year":"2010","journal-title":"Proc IEEE Int Conf on Dependable Syst and Networks (DSN)"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.05.011"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCNT.2012.6395940"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SIEDS.2018.8374749"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TIME-E.2013.6611973"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8600701\/08725491.pdf?arnumber=8725491","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T11:54:27Z","timestamp":1641988467000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8725491\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"references-count":41,"URL":"https:\/\/doi.org\/10.1109\/access.2019.2919680","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]}}}