Abstract:Summary With the development of the Internet of Things (IoT), the number of terminal devices is rapidly growing and at the same time, their security is facing serious challenges. For the industrial control system, there are challenges in detecting and preventing botnet. Traditional detection methods focus on capturing and reverse analyzing the botnet programs first and then parsing the extracted features from the malicious code or attacks. However, their accuracy is very low and their latency is relatively high. Moreover, they sometimes even cannot recognize the unknown botnets. The machine learning based detection methods rely on manual feature engineering and have a weak generalization. The deep learning‐based methods mostly rely on the system log, which does not take into account the multisource information such as traffic. To address the above issues, from the perspective of the botnet features, this paper proposes an intelligent detection method over parallel CNN‐LSTM, integrating the spatial and temporal features to identify botnets. Experimental demonstrate that the accuracy, recall, and F1‐score of our proposed method achieve up to over 98%, and the precision, 97.8%, is not the highest but reasonable. It reveals compared with the existing start‐of‐the‐art methods, our proposed method outperforms in the botnet detection. Our methodology's strength lies in its ability to harness the multifaceted information present in IoT traffic, offering a more nuanced and comprehensive analysis. The parallel CNN‐LSTM architecture ensures that spatial and temporal data are processed concurrently, preserving the integrity of the information and enabling a more robust detection mechanism. The result is a detection system that not only performs exceptionally well in a controlled environment but also holds promise for real‐world application, where the rapid and accurate identification of botnets is paramount.

Intrusion Detection Method for Industrial Control System Based on Parallel CNN-LSTM Neural Network Improved by Self-Attention

A New Industrial Intrusion Detection Method Based on CNN-BiLSTM

Intrusion Detection Algorithm of Power Grid Industrial Control System Based on CNN

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

An Intrusion Detection Method Based on Attention Mechanism to Improve CNN-BiLSTM Model

Network Intrusion Detection Method Based on CNN-BiLSTM-Attention Model

A Real-time Intrusion Detection Method for Industrial Control Network Based on Heterogeneous Feature Extractor

Data-Driven Intrusion Detection for Intelligent Internet of Vehicles: A Deep Convolutional Neural Network-Based Method

Robust Detection for Network Intrusion of Industrial IoT Based on Multi-Cnn Fusion

Hybrid Intrusion Detection Method Based On K-Means And Cnn For Smart Home

Industrial Anomaly Detection and Attack Classification Method Based on Convolutional Neural Network.

Industrial control network security situation awareness based on improved C-SVC

DL-IDS: Extracting Features Using CNN-LSTM Hybrid Network for Intrusion Detection System

Network Intrusion Detection Based on Dense Dilated Convolutions and Attention Mechanism.

Network Intrusion Detection Model Based on CNN and GRU

Network Anomaly Intrusion Detection Based on Deep Learning Approach

Intelligent botnet detection in IoT networks using parallel CNN‐LSTM fusion

A Hierarchical CNN-Transformer Model for Network Intrusion Detection

An Industrial Intrusion Detection Method Based on Hybrid Convolutional Neural Networks with Improved TCN

CNN-LSTM: Hybrid Deep Neural Network for Network Intrusion Detection System

An improved intrusion detection method for IIoT using attention mechanisms, BiGRU, and Inception-CNN