Comparative Analysis of SVM, Naïve Bayes, and Logistic Regression in Detecting IoT Botnet Attacks

The rapid proliferation of Internet of Things (IoT) devices has significantly increased the risk of cyberattacks, particularly botnet intrusions, which pose serious security threats to IoT networks. Machine learning-based Intrusion Detection Systems (IDS) have emerged as effective solutions for detecting such attacks. This study presents a comparative analysis of three widely used machine learning classifiers—Support Vector Machine (SVM), Naïve Bayes (NB), and Logistic Regression (LR)—to assess their performance in detecting IoT botnet attacks. The experiment uses the BoTNeTIoT-L01 dataset, applying preprocessing techniques such as data cleaning, normalization, and feature selection to enhance model accuracy. The models are trained and evaluated based on standard performance metrics, including accuracy, precision, recall, F1-score, and AUC-ROC. The results indicate that SVM outperforms the other classifiers in terms of detection accuracy and robustness, particularly in detecting malware based on PE files. These findings offer valuable insights into selecting suitable machine learning models for securing IoT environments. Future work will further explore integrating advanced feature selection techniques and deep learning models to improve detection performance.

@article{Siswanto2025,
  title     = {Comparative Analysis of SVM, Naïve Bayes, and Logistic Regression in Detecting IoT Botnet Attacks},
  journal   = {International Journal of Advanced Computer Science and Applications},
  volume    = {16},
  number    = {4},
  year      = {2025},
  publisher = {The Science and Information Organization},
  author    = {Apri Siswanto and Luhur Bayu Aji and Akmar Efendi and Dhafin Alfaruqi and M. Rafli Azriansyah and Yefrianda Raihan},
  doi       = {10.14569/IJACSA.2025.0160435},
  url       = {https://doi.org/10.14569/IJACSA.2025.0160435}
}