# An Adaptive Multi-Layer Botnet Detection Technique Using Machine Learning Classifiers
## 3 Proposed Scheme
### Fourth Layer: P2P Traffic Classification
* [PERSON] et al. (2014) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Building a Scalable System for Stealthy P2P-Botnet Detection. _IEEE Trans. Inf. Forensics Secur._**2014**, \(9\), 27-38. [CrossRef]
* [PERSON] et al. (2013) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Preliminary study of host and network-based analysis on P2P Botnet detection. In Proceedings of the 2013 International Conference on Technology, Informatics, Management, Engineering and Environment, Bandung, Indonesia, 23-26 June 2013; pp. 105-109. [CrossRef]
* [PERSON] (2014) [PERSON] Towards accurate node-based detection of P2P botnets. _Sci. World J._**2014**, _2014_, 425491. [CrossRef]
* Botnet detection based on traffic behavior analysis and flow intervals. _Comput. Secur._**2013**, _39_, 2-16. [CrossRef]
* [PERSON] and [PERSON] (2015) [PERSON]; [PERSON] DFBotKiller: Domain-flux botnet detection based on the history of group activities and failures in DNS traffic. _Digit. Investig._**2015**, _12_, 15-26. [CrossRef]
* [PERSON] and [PERSON] (2016) [PERSON]; [PERSON] A Survey of Data Mining and Machine Learning Methods for Cyber Security Intrusion Detection. _IEEE Commun. Surv. Tutor._**2016**, _18_, 1153-1176. [CrossRef]
* [PERSON] and [PERSON] (2017) [PERSON]; [PERSON] P2P and P2P botnet traffic classification in two stages. _Soft Comput._**2017**, _21_, 1315-1326. [CrossRef]
* [PERSON] and [PERSON] (2014) [PERSON]; [PERSON] Hybrid P2P traffic classification with heuristic rules and machine learning. _Soft Comput._**2014**, _18_, 1815-1827. [CrossRef]
* [PERSON] et al. (2015) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] [PERSON] Analysis of a/0 stealth scan from a botnet. _IEEE/ACM Trans. Netw._**2015**, _23_, 341-354. [CrossRef]
* [PERSON] et al. (2009) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Active botnet probing to identify obscure command and control channels. In Proceedings of the IEEE Annual Computer Security Application Conference, Honolulu, HI, USA, 7-11 December 2009; pp. 241-253. * [PERSON] et al. (2008) [PERSON]; [PERSON]; [PERSON]; [PERSON] BotMiner: Clustering analysis of network traffic for protocol- and structure-independent botnet detection. In Proceedings of the 17 th Conference on Security Symposium, San Jose, CA, USA, 28 July-1 August 2008; pp. 139-154. * [PERSON] et al. (2011) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Detecting stealthy P2P botnets using statistical traffic fingerprints. In Proceedings of the 2011 IEEE/IFIP 41 st International Conference on Dependable Systems & Networks (DSN), Hong Kong, China, 27-30 June 2011; pp. 121-132. [CrossRef]
* [PERSON] et al. (2008) [PERSON]; [PERSON]; [PERSON] BotSniffer: Detecting botnet command and control channels in network traffic. In Proceedings of the 15 th Annual Network and Distributed System Security Symposium, San Diego, CA, USA, 8-11 February 2008; p. 18. * [PERSON] and [PERSON] (2017) [PERSON]; [PERSON] Taxonomy of DoS and DDoS attacks and desirable defense mechanism in a cloud computing environment. _Neural Comput. Appl._**2017**, _28_, 3655-3682. [CrossRef]
* [PERSON] et al. (2015) [PERSON]; [PERSON]; [PERSON]; [PERSON] Analysis of Peer-to-Peer botnet attacks and defenses. In _Propagation Phenomena in Real World Networks_; Springer: Cham, Switzerland, 2015; pp. 183-214. * [PERSON] et al. (2009) [PERSON]; [PERSON]; [PERSON]; [PERSON] Design of P2P Traffic Identification Based on DPI and DFI. In Proceedings of the 2009 International Symposium on Computer Network and Multimedia Technology, Wuhan China, 18-20 January 2009; pp. 1-4. [CrossRef]
* [PERSON] et al. (2019) [PERSON]; [PERSON]; [PERSON] See No Evil, Hear No Evil? Dissecting the Impact of Online Hacker Forums. _MIS Q._**2019**, _43_, 73-95. [CrossRef]
* [PERSON] et al. (2011) [PERSON]; [PERSON]; [PERSON] [PERSON] Surveying port scans and their detection methodologies. _Comput. J._**2011**, _54_, 1565-1581. [CrossRef]
* IANA (2019) IANA. Service Name and Transport Protocol Port Number Registry.