{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,27]],"date-time":"2026-01-27T19:13:37Z","timestamp":1769541217279,"version":"3.49.0"},"reference-count":50,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T00:00:00Z","timestamp":1769904000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T00:00:00Z","timestamp":1769904000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T00:00:00Z","timestamp":1769904000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Major Key Project of Peng Cheng Laboratory","award":["PCL2024A05-3"],"award-info":[{"award-number":["PCL2024A05-3"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2026,2,1]]},"DOI":"10.1109\/jiot.2025.3632406","type":"journal-article","created":{"date-parts":[[2025,11,13]],"date-time":"2025-11-13T18:45:24Z","timestamp":1763059524000},"page":"4374-4390","source":"Crossref","is-referenced-by-count":0,"title":["BotEvolver: Continuous Botnet Detection in Unlabeled Incremental Network Flows"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0631-118X","authenticated-orcid":false,"given":"Fan","family":"Li","sequence":"first","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-8991-0153","authenticated-orcid":false,"given":"Xi","family":"Luo","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9997-1509","authenticated-orcid":false,"given":"Weihong","family":"Han","sequence":"additional","affiliation":[{"name":"Department of New Networks, Peng Cheng Laboratory, Shenzhen, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0305-2132","authenticated-orcid":false,"given":"Binxing","family":"Fang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8829-4442","authenticated-orcid":false,"given":"Lihua","family":"Yin","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3417-823X","authenticated-orcid":false,"given":"Jianye","family":"Yang","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.5555\/3241189.3241275"},{"key":"ref2","first-page":"3539","article-title":"MaDIoT 2.0: Modern high-WattageIoT botnet attacks and defenses","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Shekari"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/s40745-025-00602-2"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-024-11101-w"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.05.011"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2018.2876857"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/IIT50501.2020.9299061"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1155\/2020\/9024726"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3100755"},{"key":"ref10","article-title":"IoT security: Botnet detection in IoT using machine learning","author":"Pokhrel","year":"2021","journal-title":"arXiv:2104.02231"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2023.100747"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-94029-4_5"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2020.03.113"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS54207.2022.9789878"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/GLOBECOM42002.2020.9347990"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2021.05.076"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2021.3109076"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11651"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3275789"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3488560.3498455"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2014.6997492"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2023.100952"},{"key":"ref23","first-page":"7","article-title":"BotGrep: Finding P2P bots with structured graph analysis","volume-title":"Proc. 19th USENIX Secur. Symp.","author":"Nagaraja"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOMWKSHPS54753.2022.9798287"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-022-13836-6"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/s00354-022-00188-w"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-09357-9_5"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2019.102479"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539300"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467284"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539435"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.29172\/7c2a6982-6d72-4cd8-bba6-2fccb06a7011"},{"key":"ref33","article-title":"Combining label propagation and simple models out-performs graph neural networks","author":"Huang","year":"2020","journal-title":"arXiv:2010.13993"},{"key":"ref34","volume-title":"A Labeled Dataset With Malicious and Benign IoT Network Traffic","author":"Parmisano","year":"2020"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.05.041"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2018.03367731"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"ref39","article-title":"Automating botnet detection with graph neural networks","author":"Zhou","year":"2020","journal-title":"arXiv:2003.06344"},{"key":"ref40","volume-title":"Smoke Loader Botnet Drops Location Tracker Whiffy Recon Malware"},{"key":"ref41","article-title":"Hide \u2019N seek botnet updates arsenal with exploits against Nexus repository manager & ThinkPHP","author":"Nigam","year":"2019"},{"key":"ref42","volume-title":"The Zeus Trojan Malware-Definition and Prevention","year":"2023"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3575808"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/BDICN55575.2022.00159"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2022.109365"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.7717\/peerj-cs.350"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.32604\/cmc.2022.020938"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2022.3183361"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2022.3168533"},{"key":"ref50","first-page":"350","article-title":"Experience replay for continual learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Rolnick"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6488907\/11363065\/11245199.pdf?arnumber=11245199","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,27]],"date-time":"2026-01-27T06:02:10Z","timestamp":1769493730000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11245199\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,2,1]]},"references-count":50,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2025.3632406","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"value":"2327-4662","type":"electronic"},{"value":"2372-2541","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,2,1]]}}}