TY  - JOUR
AV  - public
JF  - Scientific Reports
SN  - 2045-2322
TI  - Botnet detection in internet of things using stacked ensemble learning model
UR  - http://doi.org/10.1038/s41598-025-02008-9
IS  - 1
VL  - 15
ID  - uninipr17838
KW  - Internet of things network
KW  -  Botnets
KW  -  Cyber security
KW  -  Stacking model
KW  -  Machine learning
Y1  - 2025/07//
A1  - Ali, Mudasir
A1  - Mushtaq, Muhammad Faheem
A1  - Akram, Urooj
A1  - Gavilanes Aray, Daniel
A1  - Masías Vergara, Manuel
A1  - Karamti, Hanen
A1  - Ashraf, Imran
N2  - Botnets are used for malicious activities such as cyber-attacks, spamming, and data theft and have become a significant threat to cyber security. Despite existing approaches for cyber attack detection, botnets prove to be a particularly difficult problem that calls for more advanced detection methods. In this research, a stacking classifier is proposed based on K-nearest neighbor, support vector machine, decision tree, random forest, and multilayer perceptron, called KSDRM, for botnet detection. Logistic regression acts as the meta-learner to combine the predictions from the base classifiers into the final prediction with the aim of increasing the overall accuracy and predictive performance of the ensemble. The UNSW-NB15 dataset is used to train machine learning models and evaluate their effectiveness in detecting cyber-attacks on IoT networks. The categorical features are transformed into numerical values using label encoding. Machine learning techniques are adopted to recognize botnet attacks to enhance cyber security measures. The KSDRM model successfully captures the complex patterns and traits of botnet attacks and obtains 99.99% training accuracy. The KSDRM model also performs well during testing by achieving an accuracy of 97.94%. Based on 3, 5, 7, and 10 folds, the k-fold cross-validation results show that the proposed method?s average accuracy is 99.89%, 99.88%, 99.89%, and 99.87%, respectively. Further, the demonstration of experiments and results shows the KSDRM model is an effective method to identify botnet-based cyber attacks. The findings of this study have the potential to improve cyber security controls and strengthen networks against changing threats.
ER  -