<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "https://jats.nlm.nih.gov/publishing/1.3/JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xml:lang="ru">
  <front xmlns:xlink="http://www.w3.org/1999/xlink">
    <journal-meta>
      <journal-id journal-id-type="elibrary">9004</journal-id>
      <journal-title-group>
        <journal-title>Problems of information security. Computer systems</journal-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Проблемы информационной безопасности. Компьютерные системы</trans-title>
        </trans-title-group>
      </journal-title-group>
      <issn pub-type="epub">2071-8217</issn>
    </journal-meta>
    <article-meta xmlns:xlink="http://www.w3.org/1999/xlink">
      <article-id pub-id-type="publisher-id">11</article-id>
      <title-group>
        <article-title>An approach to detecting botnet attacks in the Internet of Things networks</article-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Подход к обнаружению ботнет-атак в сетях Интернета вещей</trans-title>
        </trans-title-group>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-6419-0072</contrib-id>
          <name>
            <surname>Tatarnikova</surname>
            <given-names>Tatiana</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>Tm-tatarn@yandex.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0001-6289-3295</contrib-id>
          <contrib-id contrib-id-type="scopus">57200960264</contrib-id>
          <name>
            <surname>Sikarev</surname>
            <given-names>Igor</given-names>
          </name>
          <xref ref-type="aff" rid="aff2"/>
          <email>sikarev@yandex.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Bogdanov</surname>
            <given-names>Pavel</given-names>
          </name>
          <xref ref-type="aff" rid="aff3"/>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Timochkina</surname>
            <given-names>Tatyana</given-names>
          </name>
          <xref ref-type="aff" rid="aff2"/>
        </contrib>
      </contrib-group>
      <aff id="aff1">St. Petersburg State University of Aerospace Instrumentation</aff>
      <aff id="aff2">Russian State Hydrometeorological University</aff>
      <aff id="aff3">Saint-Petersburg State University of Aerospace Instrumentation</aff>
      <pub-date publication-format="electronic" date-type="pub" iso-8601-date="2021-11-12">
        <day>12</day>
        <month>11</month>
        <year>2021</year>
      </pub-date>
      <issue>3</issue>
      <fpage>108</fpage>
      <lpage>117</lpage>
      <self-uri xmlns:xlink="http://www.w3.org/1999/xlink" content-type="pdf" xlink:href="https://jisp.spbstu.ru/userfiles/files/2021_3_5-6.pdf"/>
      <abstract xml:lang="en">
        <p>An approach to detecting network attacks based on deep learning methods - autoencoders is proposed. It is shown that training examples can be obtained when connecting IoT devices to the network, as long as the traffic does not carry malicious code. Statistical values and functions extracted from traffic are proposed, on which patterns of behavior of IoT devices are built.</p>
      </abstract>
      <kwd-group xml:lang="en">
        <kwd>Internet of Things</kwd>
        <kwd>Network Attack</kwd>
        <kwd>Attack Detection System</kwd>
        <kwd>Autoencoder</kwd>
        <kwd>Principal Component Method</kwd>
        <kwd>Unsupervised Learning</kwd>
      </kwd-group>
    </article-meta>
  </front>
</article>
