Using machine learning techniques to identify botnet traffic

Proceedings - Conference on Local Computer Networks, LCN

Volumn , Issue , 2006, Pages 967-974

  Livadas, Carl ^a   Walsh, Robert ^a   Lapsley, David ^a   Strayer, W Timothy ^a  

^a BBN TECHNOLOGIES   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

A POSTERIORI; BAYESIAN NETWORK CLASSIFIER (BNC); BOTNETS; CLASSIFICATION ACCURACIES; CLASSIFICATION TECHNIQUES; COMMUNICATION FLOWS; CYBER ATTACKS; INTERNET RELAY CHAT (IRC); LOCAL COMPUTER; MACHINE LEARNING TECHNIQUES; MACHINE-LEARNING; MONITORING NETWORKS; NAIVE BAYES (NB); TRAINING DATA; TRAINING SETS; TWO STAGES;

ADMINISTRATIVE DATA PROCESSING; ARTIFICIAL INTELLIGENCE; BAYESIAN NETWORKS; CLASSIFICATION (OF INFORMATION); CLASSIFIERS; EDUCATION; FINANCIAL DATA PROCESSING; INFERENCE ENGINES; INTERNET; LABELING; LEARNING ALGORITHMS; LEARNING SYSTEMS; RELAY CONTROL SYSTEMS; ROBOT LEARNING; SECURITY OF DATA; STAGES;

COMPUTER NETWORKS;

ALGORITHMS; ARTIFICIAL INTELLIGENCE; COMMUNICATION; DATA PROCESSING; INTERNET; NETWORKS; PROGRAMING LANGUAGES;

EID: 46149123241     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/LCN.2006.322210     Document Type: Conference Paper

References (14)

1. C. Dewes, A. Wichmann, and A. Feldmann. An analysis of internet chat systems. In IMC'03: Proceedings of the 3rd ACM SIGCOMM conference on Internet measurement, pages 51-64, New York, NY, USA. 2003. ACM Press.
2. R. O. Duda. P. E. Hart, and D. G. Stork. Pattern Classification. John Wiley & Sons, Inc., 2 edition, 2001.
3. T. Henderson, D. Kotz, and I. Abyzov. The changing usage of a mature campus-wide wireless network. In Proceedings of the Tenth Annual International Conference on Mobile Computing and Networking (MobiCom), pages 187-201. ACM Press, September 2004.
4. T. Holz. A Short Visit to the Bot Zoo. IEEE Security & Privacy, 3(3):76-79, May 2005.
5. E. Levy. The Making of a Spam Zombie Army. IEEE Security & Privacy, 1(4):58-59, July 2003.
6. McAfee. 2006/3/6; DDoS-Kaiten http://vil.nai.com/vil/content/v_99371.htm.
7. B. McCarty. Automated Identity Theft. IEEE Security & Privacy, 1(5):89-92, Sept. 2003.
8. B. McCarty. Botnets: Big and Bigger. IEEE Security & Privacy, 1(4):87-90, July 2003.
9. A. W. Moore and D. Zuev. Internet traffic classification using bayesian analysis techniques. In SIGMETRICS '05: Proceedings of the 2005 ACM SIGMETRICS international conference on Measurement and modeling of computer systems, pages 50-60, New York, NY, USA, 2005. ACM Press.
10. M. Roughan, S. Sen, O. Spatscheck, and N. Duffield. Class-of-service mapping for qos: a statistical signature-based approach to ip traffic classification. In IMC '04: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, pages 135-148, New York, NY, USA, 2004. ACM Press.
11. S. Sen, O. Spatscheck, and D. Wang. Accurate, scalable in-network identification of p2p traffic using application signatures. In WWW '04: Proceedings of the 13th international conference on World Wide Web, pages 512-521, New York, NY, USA, 2004. ACM Press.
12. W. T. Strayer, R. Walsh, C. Livadas, and D. Lapsley. Detecting Botnets with Tight Command and Control. To Appear in 31st IEEE Conference on Local Computer Networks (LCN'06), 2006.
13. The Honeynet Project. Know Your Enemy : learning about Security Threats. Addison-Wesley Professional; 2 edition (May 17, 2004), Mar. 2004.
14. I. H. Witten and E. Frank. Data Mining: Practical Machine Learning Tools and Techniques (2nd Edition). Morgan Kaufmann, San Francisco, CA, 2005.