Detecting botnets with tight command and control

Proceedings - Conference on Local Computer Networks, LCN

Volumn , Issue , 2006, Pages 195-202

  Strayer, W Timothy ^a   Walsh, Robert ^a   Livadas, Carl ^a   Lapsley, David ^a  

^a BBN TECHNOLOGIES   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BOTNETS; FLOW CHARACTERISTICS; HONEYNETS; LOCAL COMPUTER;

INTERNET; NETWORK ARCHITECTURE;

COMPUTER NETWORKS;

EID: 41949115980     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/LCN.2006.322100     Document Type: Conference Paper

References (25)

1. "Three charged with Seattle hospital botnet attack," The Register, February 14, 2006.
2. National Infrastructure Security Coordination Center, "Targeted Trojan Email Attacks," NISCC Briefing 08/2005, June 16, 2005.
3. Rob Thormeyer, "Hacker Arrested for Breaching DoD Systems with 'Botnets'," Government Computer News, November 4, 2005.
4. Defense Security Service, Memorandum for Facility Security Officers: Foreign-based Threat to Defense Contractor Unclassified Networks, October 18, 2005.
5. CNN.com, "Expert: Botnets No. 1 Emerging Internet Threat," January 31, 2006.
6. nd Edition, Addison-Wesley, 2004.
7. S. Kandula, D. Katabi, M. Jacob, and A. Berger, "Botz-4-Sale: Surviving Organized DDoS Attacks that Mimic Flash Crowds," Proc. 2nd Symposium on Networked Systems Design and Implementation, Boston, MA, May 2-4, 2005.
8. R. Naraine, "Botnet Hunters Search for 'Command and Control' Servers," eWeek, June 17, 2005.
9. A. C. Snoeren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, S. T. Kent, and W. T. Strayer, "Single-IP Packet Traceback," IEEE/ACM Transactions on Networking (ToN), Volume 10, Number 6, December 2002.
10. Y. Zhang and V. Paxson, "Detecting Stepping Stones," Proc. 9th USENIX Security Symposium, August 2000.
11. A. Householder, Art Manion, Linda Pesante, George M. Weaver, and Rob Thomas, "Managing the Threat of Denial-of-Service Attacks," CERT Coordination Center, October 2001.
12. P. Barford and V. Yegneswaran, "An Inside Look at Botnets," Special Workshop on Malware Detection, Advances in Information Security, Springer Verlag, 2006.
13. nd IEEE LCN Workshop on Network Security, Tampa, FL, November 14, 2006.
14. D. Kotz and T. Henderson, "CRAWDAD: A Community Resource for Archiving Wireless Data at Dartmouth," IEEE Pervasive Computing, Volume 4, Issue 4, October-December 2005.
15. C. Dewes, A. Wichmann, and A. Feldmann, "An Analysis of Internet Chat Systems," Proc. 3rd ACM SIGCOMM Conf on Internet Measurement, Miami Beach, FL, 2003.
16. S. Sen, O. Spatscheck, and D. Wang, "Accurate, Scalable In-Network Identification of P2P Traffic Using Application Signatures," Proc. 13th International Conf. on World Wide Web, New York, NY, 2004.
17. th ACM SIGCOMM Conf. on Internet Measurement, Taormina, Sicily, 2004.
18. A. W. Moore and D. Zuev, "Internet Traffic Classification using Bayesian Analysis Techniques," Proc. 2005 ACM SIGMETRICS International Conf. on Measurement and Modeling of Computer Systems, Banff, Alberta, Canada, 2005.
19. T. Karagiannis, A. Broido, M. Faloutsos, and kc claffy, "Transport Layer Identification of P2P Traffic," Proc. 4th ACM SIGCOMM Conf. on Internet Measurement, Taormina, Sicily, 2004.
20. I. H. Witten and E. Frank, Data Mining: Practical Machine Learning Tools and Techniques, 2nd Edition, Morgan Kaufmann, 2005.
21. nd Edition, John Wiley & Sons, Inc., 2001.
22. D. L. Donoho, A. G. Flesia, U. Shankar, V. Paxson, J. Coit, and S. Staniford, "Multiscale Stepping-Stone Detection: Detecting Pairs of Jittered Interactive Streams by Exploiting Maximum Tolerable Delay," Proc. International Symposium on Recent Advances in Intrusion Detection (RAID), Zurich, Switzerland, October 2002.
23. K. Yoda and H. Etoh, "Finding a Connection Chain for Tracing Intruders," Proc. European Symposium on Research in Computer Security, Toulouse, France, October 2000.
24. W. T. Strayer, C. E. Jones, B. Schwartz, J. Mikkelson, and C. Livadas, "Architecture for Multi-stage Network Attack Traceback," First IEEE LCN Workshop on Network Security, Sydney, Australia, 15-17 November 2005.
25. E. Cooke, F. Jahanian, and D. McPherson, "The Zombie Roundup: Understanding, Detecting, and Disrupting Botnets," USENIX SRUTI Workshop, July 7, 2005.