N-BaIoT: Network-based Detection of IoT Botnet Attacks Using Deep Autoencoders
Not on the map. Why?
Abstract (arXiv)
The proliferation of IoT devices which can be more easily compromised than desktop computers has led to an increase in the occurrence of IoT based botnet attacks. In order to mitigate this new threat there is a need to develop new methods for detecting attacks launched from compromised IoT devices and differentiate between hour and millisecond long IoTbased attacks. In this paper we propose and empirically evaluate a novel network based anomaly detection method which extracts behavior snapshots of the network and uses deep autoencoders to detect anomalous network traffic emanating from compromised IoT devices. To evaluate our method, we infected nine commercial IoT devices in our lab with two of the most widely known IoT based botnets, Mirai and BASHLITE. Our evaluation results demonstrated our proposed method's ability to accurately and instantly detect the attacks as they were being launched from the compromised IoT devices which were part of a botnet.
Key facts. Cited by 67 papers in the map (data through 7 Oct 2026). First posted on arXiv 9 May 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 14; 2022: 13; 2023: 9; 2024: 11; 2025: 14; 2026: 6.
67 papers.
Sort:
By area:
- 2022Decentralized Federated Learning: Fundamentals, State of the Art, Frameworks, Trends, and Challengescited by 137
- 2021Federated Learning for Malware Detection in IoT Devicescited by 36
- 2021Federated Learning for Internet of Things: A Federated Learning Framework for On-device Anomaly Data Detectioncited by 19
- 2021Evaluating Federated Learning for Intrusion Detection in Internet of Things: Review and Challengescited by 16
- 2021Machine Learning for the Detection and Identification of Internet of Things (IoT) Devices: A Surveycited by 9
- 2021Demystifying the Transferability of Adversarial Attacks in Computer Networkscited by 9
- 2025PCAP-Backdoor: Backdoor Poisoning Generator for Network Traffic in CPS/IoT Environmentscited by 9
- 2022Machine Learning-Enabled IoT Security: Open Issues and Challenges Under Advanced Persistent Threatscited by 7
- 2022Machine Learning for Encrypted Malicious Traffic Detection: Approaches, Datasets and Comparative Studycited by 6
- 2022XG-BoT: An Explainable Deep Graph Neural Network for Botnet Detection and Forensicscited by 6
- 2024Lurking in the shadows: Unveiling Stealthy Backdoor Attacks against Personalized Federated Learningcited by 6
- 2025Impact of Latent Space Dimension on IoT Botnet Detection Performance: VAE-Encoder Versus ViT-Encodercited by 6
38 more
- 2022Federated PCA on Grassmann Manifold for Anomaly Detection in IoT Networkscited by 5
- 2023FederatedTrust: A Solution for Trustworthy Federated Learningcited by 5
- 2023Constrained Twin Variational Auto-Encoder for Intrusion Detection in IoT Systemscited by 5
- 2025Enhancing IoT-Botnet Detection using Variational Auto-encoder and Cost-Sensitive Learning: A Deep Learning Approach for Imbalanced Datasetscited by 5
- 2021SHARKS: Smart Hacking Approaches for RisK Scanning in Internet-of-Things and Cyber-Physical Systems based on Machine Learningcited by 4
- 2022Joint Semantic Transfer Network for IoT Intrusion Detectioncited by 4
- 2023Heterogeneous Domain Adaptation for IoT Intrusion Detection: A Geometric Graph Alignment Approachcited by 3
- 2024Federated PCA on Grassmann Manifold for IoT Anomaly Detectioncited by 3
- 2025Graph Attention Neural Network for Botnet Detection: Evaluating Autoencoder, VAE and PCA-Based Dimension Reductioncited by 3
- 2025Are GNNs Worth the Effort for IoT Botnet Detection? A Comparative Study of VAE-GNN vs. ViT-MLP and VAE-MLP Approachescited by 3
- 2021Enhancing Robustness of On-line Learning Models on Highly Noisy Datacited by 2
- 2021Deep Transfer Learning: A Novel Collaborative Learning Model for Cyberattack Detection Systems in IoT Networkscited by 2
- 2022Employing Deep Ensemble Learning for Improving the Security of Computer Networks against Adversarial Attackscited by 2
- 2022Machine and Deep Learning for IoT Security and Privacy: Applications, Challenges, and Future Directionscited by 2
- 2023A systematic literature review on the code smells datasets and validation mechanismscited by 2
- 2023TII-SSRC-23 Dataset: Typological Exploration of Diverse Traffic Patterns for Intrusion Detectioncited by 2
- 2024The Role of Deep Learning in Advancing Proactive Cybersecurity Measures for Smart Grid Networks: A Surveycited by 2
- 2024Meta-learning for Positive-unlabeled Classificationcited by 2
- 2024FedMSE: Semi-supervised federated learning approach for IoT network intrusion detectioncited by 2
- 2021Robust Attack Detection Approach for IIoT Using Ensemble Classifiercited by 1
- 2021Detecting Attacks on IoT Devices using Featureless 1D-CNNcited by 1
- 2022DP2-NILM: A Distributed and Privacy-preserving Framework for Non-intrusive Load Monitoringcited by 1
- 2022Unsupervised Ensemble Based Deep Learning Approach for Attack Detection in IoT Networkcited by 1
- 2023Online Self-Supervised Deep Learning for Intrusion Detection Systemscited by 1
- 2025AegisMCP: Online Graph Intrusion Detection for Tool-Augmented LLMs on Edge Devicescited by 1
- 2026NOS-Gate: Queue-Aware Streaming IDS for Consumer Gateways under Timing-Controlled Evasioncited by 1
- 2026BRIDGE and TCH-Net: Heterogeneous Benchmark and Multi-Branch Baseline for Cross-Domain IoT Botnet Detectioncited by 1
- 2021Meta-learning One-class Classifiers with Eigenvalue Solvers for Supervised Anomaly Detectioncited by 0
- 2021RadArnomaly: Protecting Radar Systems from Data Manipulation Attackscited by 0
- 2021Dataset: Large-scale Urban IoT Activity Data for DDoS Attack Emulationcited by 0
- 2021Reliable Probability Intervals For Classification Using Inductive Venn Predictors Based on Distance Learningcited by 0
- 2022Online Deep Learning based on Auto-Encodercited by 0
- 2022SETTI: A Self-supervised Adversarial Malware Detection Architecture in an IoT Environmentcited by 0
- 2022DF-Captcha: A Deepfake Captcha for Preventing Fake Callscited by 0
- 2023Efficient Attack Detection in IoT Devices using Feature Engineering-Less Machine Learningcited by 0
- 2023Harris Hawks Feature Selection in Distributed Machine Learning for Secure IoT Environmentscited by 0
- 2023CADeSH: Collaborative Anomaly Detection for Smart Homescited by 0
- 2024Locality Sensitive Hashing for Network Traffic Fingerprintingcited by 0
50 most cited of 67 All 67 (JSON)
- 2026F-ACVAE: A Federated Adaptive Conditional Variational Auto-Encoder for Privacy-Preserving Intrusion Detection in IoT Networks6 Jul 2026
- 2026VARS-FL: Validation-Aligned Client Selection for Non-IID Federated Learning in IoT Systems7 May 2026
- 2026BRIDGE and TCH-Net: Heterogeneous Benchmark and Multi-Branch Baseline for Cross-Domain IoT Botnet Detection13 Apr 2026
- 2026How the Graph Construction Technique Shapes Performance in IoT Botnet Detection28 Feb 2026
- 2026Uncovering and Understanding FPR Manipulation Attack in Industrial IoT Networks20 Jan 2026
- 2026NOS-Gate: Queue-Aware Streaming IDS for Consumer Gateways under Timing-Controlled Evasion1 Jan 2026
- 2025Toward Real-World IoT Security: Concept Drift-Resilient IoT Botnet Detection via Latent Space Representation Learning and Alignment27 Dec 2025
- 2025A Quantized VAE-MLP Botnet Detection Model: A Systematic Evaluation of Quantization-Aware Training and Post-Training Quantization Strategies5 Nov 2025
- 2025Federated Cyber Defense: Privacy-Preserving Ransomware Detection Across Distributed Systems3 Nov 2025
- 2025Sentinel: Dynamic Knowledge Distillation for Personalized Federated Intrusion Detection in Heterogeneous IoT Networks27 Oct 2025
- 2025AegisMCP: Online Graph Intrusion Detection for Tool-Augmented LLMs on Edge Devices22 Oct 2025
- 2025A Novel Ensemble Learning Approach for Enhanced IoT Attack Detection: Redefining Security Paradigms in Connected Systems9 Oct 2025
38 more
- 2025A Lightweight Federated Learning Approach for Privacy-Preserving Botnet Detection in IoT3 Oct 2025
- 2025FedP3E: Privacy-Preserving Prototype Exchange for Non-IID IoT Malware Detection in Cross-Silo Federated Learning9 Jul 2025
- 2025INSIGHT: A Survey of In-Network Systems for Intelligent, High-Efficiency AI and Topology Optimization30 May 2025
- 2025Are GNNs Worth the Effort for IoT Botnet Detection? A Comparative Study of VAE-GNN vs. ViT-MLP and VAE-MLP Approaches23 May 2025
- 2025Graph Attention Neural Network for Botnet Detection: Evaluating Autoencoder, VAE and PCA-Based Dimension Reduction23 May 2025
- 2025Enhancing IoT-Botnet Detection using Variational Auto-encoder and Cost-Sensitive Learning: A Deep Learning Approach for Imbalanced Datasets26 Apr 2025
- 2025Impact of Latent Space Dimension on IoT Botnet Detection Performance: VAE-Encoder Versus ViT-Encoder21 Apr 2025
- 2025PCAP-Backdoor: Backdoor Poisoning Generator for Network Traffic in CPS/IoT Environments26 Jan 2025
- 2024FedMSE: Semi-supervised federated learning approach for IoT network intrusion detection18 Oct 2024
- 2024Enhancing Intrusion Detection in IoT Environments: An Advanced Ensemble Approach Using Kolmogorov-Arnold Networks28 Aug 2024
- 2024Federated PCA on Grassmann Manifold for IoT Anomaly Detection10 Jul 2024
- 2024Lurking in the shadows: Unveiling Stealthy Backdoor Attacks against Personalized Federated Learning10 Jun 2024
- 2024Meta-learning for Positive-unlabeled Classification6 Jun 2024
- 2024Detecting Compromised IoT Devices Using Autoencoders with Sequential Hypothesis Testing21 Apr 2024
- 2024Analyzing Consumer IoT Traffic from Security and Privacy Perspectives: a Comprehensive Survey24 Mar 2024
- 2024Teacher-free Latent Self-distillation and Class-separable Representations for Lightweight IoT Attack Detection22 Mar 2024
- 2024Enhancing IoT Security Against DDoS Attacks through Federated Learning16 Mar 2024
- 2024Locality Sensitive Hashing for Network Traffic Fingerprinting12 Feb 2024
- 2024The Role of Deep Learning in Advancing Proactive Cybersecurity Measures for Smart Grid Networks: A Survey11 Jan 2024
- 2023Constrained Twin Variational Auto-Encoder for Intrusion Detection in IoT Systems5 Dec 2023
- 2023TII-SSRC-23 Dataset: Typological Exploration of Diverse Traffic Patterns for Intrusion Detection14 Sep 2023
- 2023Online Self-Supervised Deep Learning for Intrusion Detection Systems22 Jun 2023
- 2023A systematic literature review on the code smells datasets and validation mechanisms2 Jun 2023
- 2023CADeSH: Collaborative Anomaly Detection for Smart Homes2 Mar 2023
- 2023Harris Hawks Feature Selection in Distributed Machine Learning for Secure IoT Environments20 Feb 2023
- 2023FederatedTrust: A Solution for Trustworthy Federated Learning20 Feb 2023
- 2023Heterogeneous Domain Adaptation for IoT Intrusion Detection: A Geometric Graph Alignment Approach24 Jan 2023
- 2023Efficient Attack Detection in IoT Devices using Feature Engineering-Less Machine Learning9 Jan 2023
- 2022Federated PCA on Grassmann Manifold for Anomaly Detection in IoT Networks23 Dec 2022
- 2022Decentralized Federated Learning: Fundamentals, State of the Art, Frameworks, Trends, and Challenges15 Nov 2022
- 2022Joint Semantic Transfer Network for IoT Intrusion Detection28 Oct 2022
- 2022Machine and Deep Learning for IoT Security and Privacy: Applications, Challenges, and Future Directions24 Oct 2022
- 2022Employing Deep Ensemble Learning for Improving the Security of Computer Networks against Adversarial Attacks25 Sep 2022
- 2022DF-Captcha: A Deepfake Captcha for Preventing Fake Calls17 Aug 2022
- 2022XG-BoT: An Explainable Deep Graph Neural Network for Botnet Detection and Forensics19 Jul 2022
- 2022Unsupervised Ensemble Based Deep Learning Approach for Attack Detection in IoT Network16 Jul 2022
- 2022DP2-NILM: A Distributed and Privacy-preserving Framework for Non-intrusive Load Monitoring30 Jun 2022
- 2022SETTI: A Self-supervised Adversarial Malware Detection Architecture in an IoT Environment16 Apr 2022
50 newest of 67 All 67 (JSON)
- 2022Decentralized Federated Learning: Fundamentals, State of the Art, Frameworks, Trends, and Challengescited by 137
- 2021Federated Learning for Malware Detection in IoT Devicescited by 36
- 2021Federated Learning for Internet of Things: A Federated Learning Framework for On-device Anomaly Data Detectioncited by 19
- 2021Evaluating Federated Learning for Intrusion Detection in Internet of Things: Review and Challengescited by 16
- 2021Machine Learning for the Detection and Identification of Internet of Things (IoT) Devices: A Surveycited by 9
- 2021Demystifying the Transferability of Adversarial Attacks in Computer Networkscited by 9
- 2022Machine Learning-Enabled IoT Security: Open Issues and Challenges Under Advanced Persistent Threatscited by 7
- 2022Machine Learning for Encrypted Malicious Traffic Detection: Approaches, Datasets and Comparative Studycited by 6
- 2022XG-BoT: An Explainable Deep Graph Neural Network for Botnet Detection and Forensicscited by 6
- 2024Lurking in the shadows: Unveiling Stealthy Backdoor Attacks against Personalized Federated Learningcited by 6
- 2025Impact of Latent Space Dimension on IoT Botnet Detection Performance: VAE-Encoder Versus ViT-Encodercited by 6
- 2022Federated PCA on Grassmann Manifold for Anomaly Detection in IoT Networkscited by 5
12 most cited of 65 All 65 (JSON)
- 2026F-ACVAE: A Federated Adaptive Conditional Variational Auto-Encoder for Privacy-Preserving Intrusion Detection in IoT Networks6 Jul 2026
- 2026VARS-FL: Validation-Aligned Client Selection for Non-IID Federated Learning in IoT Systems7 May 2026
- 2026BRIDGE and TCH-Net: Heterogeneous Benchmark and Multi-Branch Baseline for Cross-Domain IoT Botnet Detection13 Apr 2026
- 2026How the Graph Construction Technique Shapes Performance in IoT Botnet Detection28 Feb 2026
- 2026Uncovering and Understanding FPR Manipulation Attack in Industrial IoT Networks20 Jan 2026
- 2026NOS-Gate: Queue-Aware Streaming IDS for Consumer Gateways under Timing-Controlled Evasion1 Jan 2026
- 2025Toward Real-World IoT Security: Concept Drift-Resilient IoT Botnet Detection via Latent Space Representation Learning and Alignment27 Dec 2025
- 2025A Quantized VAE-MLP Botnet Detection Model: A Systematic Evaluation of Quantization-Aware Training and Post-Training Quantization Strategies5 Nov 2025
- 2025Federated Cyber Defense: Privacy-Preserving Ransomware Detection Across Distributed Systems3 Nov 2025
- 2025Sentinel: Dynamic Knowledge Distillation for Personalized Federated Intrusion Detection in Heterogeneous IoT Networks27 Oct 2025
- 2025A Novel Ensemble Learning Approach for Enhanced IoT Attack Detection: Redefining Security Paradigms in Connected Systems9 Oct 2025
- 2025A Lightweight Federated Learning Approach for Privacy-Preserving Botnet Detection in IoT3 Oct 2025
12 newest of 65 All 65 (JSON)