Abstract:Summary With the development of the Internet of Things (IoT), the number of terminal devices is rapidly growing and at the same time, their security is facing serious challenges. For the industrial control system, there are challenges in detecting and preventing botnet. Traditional detection methods focus on capturing and reverse analyzing the botnet programs first and then parsing the extracted features from the malicious code or attacks. However, their accuracy is very low and their latency is relatively high. Moreover, they sometimes even cannot recognize the unknown botnets. The machine learning based detection methods rely on manual feature engineering and have a weak generalization. The deep learning‐based methods mostly rely on the system log, which does not take into account the multisource information such as traffic. To address the above issues, from the perspective of the botnet features, this paper proposes an intelligent detection method over parallel CNN‐LSTM, integrating the spatial and temporal features to identify botnets. Experimental demonstrate that the accuracy, recall, and F1‐score of our proposed method achieve up to over 98%, and the precision, 97.8%, is not the highest but reasonable. It reveals compared with the existing start‐of‐the‐art methods, our proposed method outperforms in the botnet detection. Our methodology's strength lies in its ability to harness the multifaceted information present in IoT traffic, offering a more nuanced and comprehensive analysis. The parallel CNN‐LSTM architecture ensures that spatial and temporal data are processed concurrently, preserving the integrity of the information and enabling a more robust detection mechanism. The result is a detection system that not only performs exceptionally well in a controlled environment but also holds promise for real‐world application, where the rapid and accurate identification of botnets is paramount.

Botnet Detection Based on Generative Adversarial Network and Efficient Lifelong Learning Algorithm

Detection Method of Domain Names Generated by DGAs Based on Semantic Representation and Deep Neural Network

Tackling Evolving Botnet Threats: A Gradual Self-Training Neural Network Approach

CNN-based DGA Detection with High Coverage

A GNN-Enhanced Game Bot Detection Model for MMORPGs

Deep Reinforcement Learning based Evasion Generative Adversarial Network for Botnet Detection

CL-GAN: A GAN-based Continual Learning Model for Generating and Detecting AGDs

Enhancing network intrusion detection: a dual-ensemble approach with CTGAN-balanced data and weak classifiers

AEC_GAN: Unbalanced Data Processing Decision-Making in Network Attacks Based on ACGAN and Machine Learning

Hybrid Data Augmentation Based Machine Learning Approach for Botnet Attack Detection in IOT Networks

Comprehensive Botnet Detection by Mitigating Adversarial Attacks, Navigating the Subtleties of Perturbation Distances and Fortifying Predictions with Conformal Layers

Domain-Embeddings Based DGA Detection with Incremental Training Method

Advanced Cyber Attack Detection Using Generative Adversarial Networks and NLP

Efficient GAN-based method for cyber-intrusion detection

Bot-DM: A dual-modal botnet detection method based on the combination of implicit semantic expression and graphical expression

CALEB: A Conditional Adversarial Learning Framework to Enhance Bot Detection

Uit-DGAdetector: detect domains generated by algorithms using machine learning

Intelligent botnet detection in IoT networks using parallel CNN‐LSTM fusion

The More, the Better? A Study on Collaborative Machine Learning for DGA Detection

Automatic Botnet Attack Identification Based on Machine Learning

Associated Random Neural Networks for Collective Classification of Nodes in Botnet Attacks