Adaptive decision tree with random forest integration and dimensionality reduction for efficient botnet forensics

Adaptive Decision Tree with Random Forest Integration and Dimensionality Reduction for Efficient Botnet Forensics proposes a new method for botnet detection by combining an adaptive decision tree with random forest integration. As response variables are highly dimensioned in botnet detection, multistep and time-consuming detection processes are major challenges. With an integrated method, we could first model the response variables as multiclass and regression formats to simplify the construction of decision trees. Then, based on the adaptive decision tree feature selection, we filter out non-obvious features to efficiently establish the random forest regression model under the appropriately sized feature space. Furthermore, to handle multilabel classification, a random forest is employed as the global model in Tree-2-Rule procedures to detect botnet-affected communication behaviors. Finally, real data experiments have been conducted based on the top datasets. The results show that the adaptive decision tree has excellent improvements in efficiency and accuracy. In future research, the GPU ninth-ordinal censored multistate diagnosis data is useful observed materials that do not destroy the random effect influence of the data. Also, whether the application of the random forest model could save more time in analyzing existing commercial status is an issue to be clarified in future development. Additionally, the development of the method proposed in this research requires further investigation. We could improve and then propose the preferable solution based on the research results. Our proposed solution can be utilized as a tool for efficient real-time bot incident investigations, in accordance with both academic and business objectives.