Machine Learning-Based Detection of Mirai and Bashlite Botnets in IoT Networks

Clicks: 1
ID: 312955
2024
Free PDF
Article Quality & Performance Metrics
Overall Quality
Not rated
Combines reader engagement with the AI quality analysis. This article has not been analysed, so there is no overall score — reader engagement is measured and shown alongside.
AI Quality Assessment
Not analyzed
Readership in this journal

Ranked #388 of 705 articles by views in Journal of Computing & Biomedical Informatics

Most read Least read

Bar heights use a square-root scale. Only the 120 most-read articles are drawn; the journal has 705 in total.

Mint this article as an NFT
Not yet minted

Create a permanent, verifiable on-chain record of this article on the Scimatic Network. The NFT is held in your Journament account, and you can withdraw it to your own wallet at any time.

5 SUSD one-off · no wallet required
Sign in to mint
Abstract
The growth of IoT devices has caused more botnet attacks, similar the Mirai botnet, which is a major cause of distributed denial of service (DDoS) attacks. Mirai gained notoriety for its involvement in large-scale attacks that compromised numerous IoT devices through weak authentication credentials. Similarly, Bashlite, also known as Bash0day or Lizkebab, targets vulnerable IoT devices by exploiting the Shellshock vulnerability in Linux-based systems. These botnets leverage compromised devices to carry out malicious activities and the propagation of malware. Machine Learning (ML) methods have been proposed to detect botnets, but finding both Mirai and Bashlite botnets at the same time is difficult because their attack patterns are different. The Random Forest (RF), Support Vector Machine (SVM) and Logistic Regression (LR) based detector for Mirai and Bashlite botnets are implemented in our detection method using machine learning. This study used N-BaIoT dataset to train these algorithms in order to detect the best features that distinguish botnet attacks on Internet of Things (IoT) devices. In this research we used two infected devices against five protocols. All machine learning algorithms used are reasonably accurate, as their test validation accuracy was greater than 99%, although Random Forest seemed to work the best.
Reference Key
imported_1777058045_69ebc0fd99f3f Use this key to autocite in the manuscript while using SciMatic Manuscript Manager or Thesis Manager
Authors Muhammad Asad
Journal Journal of Computing & Biomedical Informatics
Year 2024
DOI
DOI not found
URL
https://jcbi.org/index.php/Main/article/view/517
Keywords Keywords not found

Citations

No citations found. To add a citation, contact the admin at info@scimatic.org

Comments

No comments yet. Be the first to comment on this article.