Botnet detection based on traffic behavior analysis and flow intervals

By David Zhao, Issa Traoré, B. Sayed, Wei-Zhou Lu, Sherif Saad, Ali Akbar Ghorbani, Dan Garant. Computers & security, 2013

359 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

An empirical comparison of botnet detection methods (2014, background): “As far as we know, only three papers (Wurzinger et al., 2010; Zhao et al., 2013; Li et al., 2010) made the effort so far.”
Detecting and Preventing Cyber Insider Threats: A Survey (2018, background): “subscribing to a dynamic Domain Name System (DDNS) service to avoid detection [34], [35].”
Internet of Things Applications, Security Challenges, Attacks, Intrusion Detection, and Future Visions: A Systematic Review (2021, background): “Particular protocols/structures are also used for detection in a research study, but this approach is not practical if the same structure is not operated by other Botnets [68].”
A Survey of Random Forest Based Methods for Intrusion Detection Systems (2018, background): “In the Network Intrusion Detection Systems’ context, it can be defined as those which do not depend on source, destination, and payload of packets to detect intrusions (Zhao et al. 2013).”