{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,27]],"date-time":"2026-08-27T23:57:10Z","timestamp":1787875030418,"version":"build-2784847793"},"reference-count":65,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100000770","name":"University of Manchester","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000770","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/access.2021.3110188","type":"journal-article","created":{"date-parts":[[2021,9,3]],"date-time":"2021-09-03T16:06:28Z","timestamp":1630685188000},"page":"124360-124383","source":"Crossref","is-referenced-by-count":64,"title":["An Automated and Comprehensive Framework for IoT Botnet Detection and Analysis (IoT-BDA)"],"prefix":"10.1109","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4552-2297","authenticated-orcid":false,"given":"Tolijan","family":"Trajanovski","sequence":"first","affiliation":[{"name":"Department of Computer Science, The University of Manchester, Manchester, U.K."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ning","family":"Zhang","sequence":"additional","affiliation":[{"name":"Department of Computer Science, The University of Manchester, Manchester, U.K."}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","year":"2021","journal-title":"Qemu"},{"key":"ref38","year":"2021","journal-title":"Reverse Engineering Framework"},{"key":"ref33","year":"2021","journal-title":"Honeypot or not?"},{"key":"ref32","year":"2021","journal-title":"New Mirai Variant Aisuru Detects Cowrie Opensource Honeypots"},{"key":"ref31","year":"2021","journal-title":"Compatibility Between ARM Architectures"},{"key":"ref30","year":"2020","journal-title":"New Dark_Nexus IoT Botnet Puts Others to Shame"},{"key":"ref37","author":"trajanovski","year":"2021","journal-title":"SSH-backdoor Botnet With ’Research’ Infection Technique"},{"key":"ref36","author":"cirlig","year":"2021","journal-title":"ADBHoney"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/1233341.1233399"},{"key":"ref34","author":"demeter","year":"2021","journal-title":"Iot a malware story"},{"key":"ref60","author":"die","year":"2021","journal-title":"Linux\/Mirai-Fbot—A Re-Emerged IoT Threat"},{"key":"ref62","author":"paul","year":"2021","journal-title":"Evasion Techniques Dissected A Mirai Case Study"},{"key":"ref61","article-title":"Hunting advanced IoT malware","author":"ye","year":"2019","journal-title":"Proc 22nd Int AVAR Cybersecur Conf"},{"key":"ref63","year":"2021","journal-title":"New Mozi Malware Family Quietly Amasses IoT Bots"},{"key":"ref28","year":"2021","journal-title":"IoC and IoA Indicators of Intelligence"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2956173"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329847"},{"key":"ref65","first-page":"229","article-title":"A comprehensive methodology for deploying IoT honeypots","author":"acien","year":"2018","journal-title":"TrustBus"},{"key":"ref29","author":"trajanovski","year":"2021","journal-title":"URL-less IoT Botnet Propagation"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2017.201"},{"key":"ref1","year":"2019","journal-title":"IoT Botnets Are Evolving—How Big Can They Get?"},{"key":"ref20","year":"2021","journal-title":"Limon Sandbox"},{"key":"ref22","year":"2021","journal-title":"ELFDIGEST-IoT Botnet Analysis Service"},{"key":"ref21","author":"zhang","year":"2021","journal-title":"IoT-BDA botnet analysis dataset"},{"key":"ref24","first-page":"1093","article-title":"Understanding the mirai botnet","author":"antonakakis","year":"2017","journal-title":"Proc 26th USENIX Secur Symp"},{"key":"ref23","article-title":"Hajime: Analysis of a decentralized internet worm for IoT devices","author":"edwards","year":"2016"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3230833.3232802"},{"key":"ref25","year":"2021","journal-title":"What is a Honeypot?"},{"key":"ref50","year":"2021","journal-title":"ZeroAccess uses Self-Debugging"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3140368.3140371"},{"key":"ref59","year":"2021","journal-title":"Malware Bazaar"},{"key":"ref58","year":"2021","journal-title":"Top Malware Hosting Networks"},{"key":"ref57","doi-asserted-by":"crossref","first-page":"230","DOI":"10.1007\/978-3-319-45719-2_11","article-title":"AVclass: A tool for massive malware labeling","author":"sebasti\u00e1n","year":"2016","journal-title":"Research in Attacks Intrusions and Defenses"},{"key":"ref56","year":"2021","journal-title":"VirusTotal"},{"key":"ref55","year":"2021","journal-title":"Pyshark—PyPI"},{"key":"ref54","year":"2021","journal-title":"Disspcap—PyPI"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3139292"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590325"},{"key":"ref10","article-title":"Iotcandyjar: Towards an intelligent-interaction honeypot for IoT devices","author":"luo","year":"2017"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/eCrime47957.2019.9037501"},{"key":"ref40","year":"2021","journal-title":"Buildroot—Making Embedded Linux Easy"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3055186.3055192"},{"key":"ref13","article-title":"ThingPot: An interactive Internet-of-Things honeypot","author":"wang","year":"2018","journal-title":"arXiv 1807 04114"},{"key":"ref14","article-title":"Capturing attacks on IoT devices with a multi-purpose IoT honeypot","author":"krishnaprasad","year":"2017"},{"key":"ref15","year":"2021","journal-title":"Honeything Honeypot"},{"key":"ref16","year":"2021","journal-title":"Detux Sandbox"},{"key":"ref17","author":"uhricek","year":"2019","journal-title":"Lisa Sandbox"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3014891"},{"key":"ref19","year":"2021","journal-title":"Cuckoo Sandbox"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2018.03367731"},{"key":"ref3","first-page":"1","article-title":"Cleaning up the internet of evil things: Real-world evidence on ISP and consumer efforts to remove Mirai","author":"\u00e7etin","year":"2019","journal-title":"Proc NDSS"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00054"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2017.8170867"},{"key":"ref8","year":"2021","journal-title":"Cowrie honeypot"},{"key":"ref7","year":"2021","journal-title":"Telnet IoT honeypot"},{"key":"ref49","author":"o\u2019neill","year":"2016","journal-title":"Learning Linux Binary Analysis"},{"key":"ref9","first-page":"9","article-title":"IoTPOT: Analysing the rise of IoT compromises","author":"pa","year":"2015","journal-title":"Proc 9th USENIX Conf Offensive Technol"},{"key":"ref46","year":"2021","journal-title":"UPX Anti-Unpacking Techniques in IoT Malware"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/AsiaJCIS.2018.00023"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87403-4_2"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2995887"},{"key":"ref42","year":"2021","journal-title":"System"},{"key":"ref41","year":"2021","journal-title":"The tcpdump manual page"},{"key":"ref44","article-title":"Tracking mirai variants","author":"liu","year":"2018","journal-title":"Proc 13th Asia Joint Conf Inf Secur (AsiaJCIS)"},{"key":"ref43","year":"2021","journal-title":"Strace(1)—Linux Manual Page"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/9312710\/09529169.pdf?arnumber=9529169","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,15]],"date-time":"2024-01-15T16:26:56Z","timestamp":1705336016000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9529169\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":65,"URL":"https:\/\/doi.org\/10.1109\/access.2021.3110188","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}