Review Article
Survey on Botnet Detection Techniques: Classification, Methods, and Evaluation
| Evaluation group | Attribute value | Bot Catcher | PRCL | XIONG | PeerHunter | PSO | ConnSpoiler | BotSifter | HANABot | EV | Score | EV | Score | EV | Score | EV | Score | EV | Score | EV | Score | EV | Score | EV | Score |
| Service | Accuracy | Ac: VL | 0.95 | Ac: L | 0.9 | Ac: L | 0.9 | Ac:vL | 0.95 | Ac: vL | 0.95 | Ac: L | 0.9 | Ac: L | 0.9 | Ac:vL | 0.95 | Scenes | Se: G | 0.9 | Se: G | 0.9 | Se: G | 0.9 | Se: G | 0.9 | Se: G | 0.9 | Se: S | 0.8 | Se: G | 0.9 | Se: G | 0.9 | Lifecycle stage | St: I | 0.5 | St: I | 0.5 | St: I | 0.5 | St: E | 0.7 | St: I | 0.5 | St: E | 0.7 | St: I | 0.5 | St: E | 0.7 |
| Intelligent | Automation | Au: H | 0.9 | Au: H | 0.9 | Au: M | 0.7 | Au: M | 0.7 | Au: M | 0.7 | Au: M | 0.7 | Au: M | 0.7 | Au: M | 0.7 | Adaptation | Ad: Y | 0.9 | Ad: Y | 0.9 | Ad: Y | 0.9 | Ad: Y | 0.9 | Ad: Y | 0.9 | Ad: Y | 0.9 | Ad: Y | 0.9 | Ad: Y | 0.9 | Real-time | Re: N | 0.6 | Re: Y | 0.9 | Re: N | 0.6 | Re: N | 0.6 | Re: N | 0.6 | Re: N | 0.6 | Re: Y | 0.9 | Re: N | 0.6 |
| Collaboration | Architecture | Ar: C | 0.6 | Ar: C | 0.6 | Ar: C | 0.6 | Ar: C | 0.6 | Ar: C | 0.6 | Ar: C | 0.6 | Ar: D | 0.9 | Ar: C | 0.6 | Content | Co: S | 0.7 | Co: S | 0.7 | Co: S | 0.7 | Co: M | 0.9 | Co: S | 0.7 | Co: S | 0.7 | Co: S | 0.7 | Co: M | 0.9 | Deep latent latency | In: N | 0.7 | In: N | 0.7 | In: N | 0.7 | In: N | 0.7 | In: Y | 0.9 | In: N | 0.7 | In: Y | 0.9 | In: N | 0.7 |
| Assistant | Lurking | La: N | 0.6 | La: Y | 0.8 | La: N | 0.6 | La: N | 0.6 | La: N | 0.6 | La: N | 0.6 | La: N | 0.6 | La: N | 0.6 | Cost | Cos: H | 0.5 | Cos: H | 0.5 | Cos: L | 0.9 | Cos: M | 0.7 | Cos: L | 0.9 | Cos: L | 0.9 | Cos: H | 0.5 | Cos: H | 0.5 | Visualization | Vi: N | 0.5 | Vi: N | 0.5 | Vi: Y | 0.6 | Vi: N | 0.5 | Vi: N | 0.5 | Vi: N | 0.5 | Vi: N | 0.5 | Vi: N | 0.5 |
|
|