Deep fused flow and topology features for botnet detection basing on pretrained GCN

arXiv:2307.10583v4 Announce Type: replace
Abstract: Nowadays, botnets have become one of the major threats to cyber security. The characteristics of botnets are mainly reflected in bots network behavior and their intercommunication relationships. Existing botnet detection methods use flow features or topology features individually, which overlook the other type of feature. This affects model performance. In this paper, we propose a botnet detection model which uses graph convolutional network (GCN) to deeply fuse flow features and topology features for the first …

arxiv botnet botnets bots cs.cr cyber cyber security detection features flow major network relationships security threats