A Kind of Botnet Detection Method Based on State Transition of Zombie

Author(s):  
Li hua Jiang ◽  
Wan gang Wang
2017 ◽  
Vol 27 (4) ◽  
pp. 1-6 ◽  
Author(s):  
Tao Wang ◽  
Kazuki Katsumata ◽  
Atsushi Ishiyama ◽  
So Noguchi

Author(s):  
Wei Ma ◽  
Xing Wang ◽  
Jiguang Wang ◽  
Qianyun Chen

Botnet is a serious threat for the Internet and it has created great damage to the Internet. How to detect botnet has become an ongoing endeavor research. Series of methods have been discussed in recent research. However, one of the remaining challenges is that the high computational overhead. In this paper, a lightweight hybrid botnet detection method is proposed. Considering the features in the botnet data packets and the characteristic of employing DGA (Domain Generation Algorithm) domain names to connect to the botnet, two sensors are designed and deployed individually and parallelly. Signature detection is used on the gateway sensor to dig out known bot software and deep learning based techniques are used on the DNS (Domain Name Server) server sensor to find DGA domain names. With this method, the computational overhead would be shared by the two sensors and experiments are conducted and the results indicate that the method is effective in detecting botnet


2016 ◽  
Vol 97 ◽  
pp. 48-73 ◽  
Author(s):  
Jonghoon Kwon ◽  
Jehyun Lee ◽  
Heejo Lee ◽  
Adrian Perrig

2018 ◽  
Vol 32 (32) ◽  
pp. 1850356
Author(s):  
Huang Kun ◽  
Wu Jun

In order to solve the problem of detection efficiency and the detection speed in botnet detection, a novel botnet detection method is proposed based on hill-climbing algorithm and FARIMA. At first, the evaluation indexes are presented in this method, and botnet and infection hosts are quickly searched with hill-climbing algorithm. Then, FARIMA model is introduced to cut down the long-correlation of detection index. Finally, a simulation was conducted to research on the key factors with MATLAB. The result shows that, compared to other algorithms, it has good adaptability, and it could effectively search for infected hosts and botnets.


Author(s):  
Giovanni Bottazzi ◽  
Giuseppe F. Italiano ◽  
Giuseppe G. Rutigliano

Sign in / Sign up

Export Citation Format

Share Document