{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,22]],"date-time":"2026-04-22T10:05:20Z","timestamp":1776852320369,"version":"3.51.2"},"reference-count":68,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100013410","name":"Framework Agreement between the University of Le\u00f3n and Spanish National Cybersecurity Institute","doi-asserted-by":"publisher","award":["Addendum 01"],"award-info":[{"award-number":["Addendum 01"]}],"id":[{"id":"10.13039\/501100013410","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003176","name":"Formaci\u00f3n de Profesorado Universitario (FPU), Spanish Government","doi-asserted-by":"publisher","award":["FPU18\/05804"],"award-info":[{"award-number":["FPU18\/05804"]}],"id":[{"id":"10.13039\/501100003176","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/access.2021.3108222","type":"journal-article","created":{"date-parts":[[2021,8,26]],"date-time":"2021-08-26T20:26:26Z","timestamp":1630009586000},"page":"120567-120579","source":"Crossref","is-referenced-by-count":42,"title":["Efficient Detection of Botnet Traffic by Features Selection and Decision Trees"],"prefix":"10.1109","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7923-1658","authenticated-orcid":false,"given":"Javier","family":"Velasco-Mata","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8742-3775","authenticated-orcid":false,"given":"Victor","family":"Gonzalez-Castro","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1202-5232","authenticated-orcid":false,"given":"Eduardo Fidalgo","family":"Fernandez","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Enrique","family":"Alegre","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2017.2700270"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2011.5971980"},{"key":"ref33","first-page":"479","article-title":"A detailed analysis of CICIDS2017 dataset for designing intrusion detection systems","volume":"7","author":"panigrahi","year":"2018","journal-title":"Int J Eng Technol"},{"key":"ref32","first-page":"563","article-title":"BotCap: Machine learning approach for botnet detection based on statistical features","volume":"10","author":"gadelrab","year":"2018","journal-title":"Int J Comput Netw Inf Secur"},{"key":"ref31","first-page":"235","article-title":"BotSniffer: Detecting botnet command and control channels in network traffic","author":"gu","year":"2008","journal-title":"Proc 16th Annu Netw Distrib Syst Secur Symp (NDSS)"},{"key":"ref30","first-page":"139","article-title":"BotMiner: Clustering analysis of network traffic for protocol-and structure-independent botnet detection","author":"gu","year":"2008","journal-title":"Proc 17th Conf Secur Symp"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICCE.2019.8662080"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.09.004"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2012.75"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3314545.3314569"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/bty373"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3314545.3314562"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/btw377"},{"key":"ref63","author":"sasaki","year":"2007","journal-title":"The Truth of the F-measure"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CONIELECOMP.2017.7891834"},{"key":"ref64","first-page":"41","article-title":"A comparison of event models for naive Bayes text classification","volume":"752","author":"mccallum","year":"1998","journal-title":"Proc AAAI Workshop Learn Text Categorization"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW.2019.00029"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/BF00994006"},{"key":"ref66","first-page":"18","article-title":"Classification and regression by random forest","volume":"2","author":"liaw","year":"2002","journal-title":"R Newsletter"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.05.011"},{"key":"ref67","author":"singh","year":"2008","journal-title":"Bootstrap A Statistical Method"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/1963405.1963487"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/PESGM40551.2019.8974098"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.04.007"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CW.2019.00059"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TLA.2020.9082916"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2019.00193"},{"key":"ref24","first-page":"1","article-title":"Robust early stage botnet detection using machine learning","author":"muhammad","year":"2020","journal-title":"Proc Int Conf Cyber Warfare Secur (ICCWS)"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2014.6997492"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICNSC.2017.8000162"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICICCT.2017.7975246"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.4038\/jnsfsr.v46i4.8560"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"ref59","author":"das","year":"2019","journal-title":"Risks and Caution on Applying PCA for Supervised Learning Problems"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-020-00367-7"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-6634-9_25"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2402161"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3339252.3340497"},{"key":"ref54","author":"takata","year":"2019","journal-title":"MWS Datasets 2016 Anti-Malware Engineering Workshop (MWS)"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/DASC\/PiCom\/DataCom\/CyberSciTec.2018.00040"},{"key":"ref52","year":"2019","journal-title":"Stratosphere IPS Website"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2008.12.005"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.09.004"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ICAIBD.2018.8396200"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2996758.2996768"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2008.08.003"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-29859-3_38"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2014.6785439"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.3390\/app9112375"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.7717\/peerj-cs.350"},{"key":"ref18","first-page":"203","article-title":"Botnet attack detection using machine learning","author":"alshamkhany","year":"2020","journal-title":"Proc 14th Int Conf Innov Inf Technol (IIT)"},{"key":"ref19","first-page":"1","article-title":"The effect on network flows-based features and training set size on malware detection","author":"jimenez","year":"2018","journal-title":"Proc IEEE 17th Int Symp Netw Comput Appl (NCA)"},{"key":"ref4","year":"2020","journal-title":"2019 Internet Crime Report"},{"key":"ref3","author":"bissell","year":"2019","journal-title":"Ninth Annual Cost of Cybercrime Study"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2916717"},{"key":"ref5","article-title":"ENISA threat landscape 2020—Botnet","author":"louren\u00e7o","year":"2020"},{"key":"ref8","first-page":"229","article-title":"Snort: Lightweight intrusion detection for networks","volume":"99","author":"roesch","year":"1999","journal-title":"LISA"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2927355"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.12.012"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/WAINA.2012.29"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2016.2519914"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2015.03.009"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-016-2564-5"},{"key":"ref47","doi-asserted-by":"crossref","first-page":"1200","DOI":"10.1109\/MIPRO.2015.7160458","article-title":"A review of feature selection methods with applications","author":"jovic","year":"2015","journal-title":"Proc 38th Int Conv Inf Commun Technol Electron Microelectron (MIPRO)"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2018.8489096"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.13052\/jcsm2245-1439.812"},{"key":"ref44","first-page":"94","article-title":"Feature selection: A data perspective","volume":"50","author":"li","year":"2016","journal-title":"ACM Comput Surv"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ECRIME.2018.8376209"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/9312710\/09523853.pdf?arnumber=9523853","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,12,17]],"date-time":"2021-12-17T19:57:53Z","timestamp":1639771073000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9523853\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":68,"URL":"https:\/\/doi.org\/10.1109\/access.2021.3108222","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}