IRC traffic analysis for botnet detection

Proceedings - The 4th International Symposium on Information Assurance and Security, IAS 2008

Volumn , Issue , 2008, Pages 318-323

  Mazzariello, Claudio ^a  

^a UNIVERSITY OF NAPLES FEDERICO II   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

COORDINATION REACTIONS; INTERNET;

BEHAVIORAL MODELS; BOTNETS; COORDINATED ATTACKS; NETWORK TRAFFIC ANALYSES; NETWORK USERS; SPECIFIC CLASSES; TRAFFIC ANALYSIS;

COMPUTER NETWORKS;

EID: 55349090681     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IAS.2008.58     Document Type: Conference Paper

References (19)

1. M. Akiyama, T. Kawamoto, M. Shimamura, T. Yokoyama, Y. Kadobayashi, and S. Yamaguchi. A proposal of metrics for botnet detection based on its cooperative behavior. InSAINT-W '07: Proceedings of the 2007 International Symposium on Applications and the Internet Workshops, page 82, Washington, DC, USA, 2007. IEEE Computer Society.
2. P. Barford and V. Yegneswaran. An inside look at botnets. In M. Christodorescu, S. Jha, D. Maughan, D. Song, and C. Wang, editors, Special Workshop on Malware Detection, volume 27 of Advances in Information Security. Springer Verlag, 2007.
3. J. R. Binkley and S. Singh. An algorithm for anomaly-based botnet detection. In SRUTI' 06: Proceedings of the 2nd conference on Steps to Reducing Unwanted Traffic on the Internet, pages 7-7, Berkeley, CA, USA, 2006. USENIX Association.
4. E. Cooke, F. Jahanian, and D. Mcpherson. The zombie roundup: Understanding, detecting, and disrupting botnets. pages 39-44, June 2005.
5. D. Dagon, C. Zou, and W. Lee. Modeling botnet propagation using time zones. In NDSS. The Internet Society, 2006.
6. H. Dreger, A. Feldmann, M. Mai, V. Paxson, and R. Summer. Dynamic application-layer protocol analysis for network intrusion detection. In USENIX-SS'6: Proceedings of the 15th conference on USENIX Security Symposium, pages 18-18, Berkeley, CA, USA, 2006. USENIX Association.
7. M. Gebski, A. Penev, and R. K. Wong. Protocol identification of encrypted network traffic. In Web Intelligence, pages 957-960. IEEE Computer Society, 2006.
8. J. Goebel and T. Holz. Rishi: identify bot contaminated hosts by ire nickname evaluation. In HotBots'07: Proceedings of the first conference on First WorkshoponHot Topics in Understanding Botnets, pages 8-8, Berkeley, CA, USA, 2007. USENIX Association
9. M. Lesk. The new front line: Estonia under cyberassault. Security and Privacy, IEEE, 5(4):76-79, July-Aug. 2007.
10. C. Livadas, R. Walsh, D. Lapsley, and W. Strayer. Using machine learning technliques to identify botnet traffic. Local Computer Networks, Proceedings 2006 31st IEEE Conference on, pages 967-974, Nov. 2006.
11. J. Oikarinen and D. Reed. Internet relay chat protocol. RFC, May 1993.
12. R. Puri. Bots and botnets: An overview. Technical report, SANS institute, 2003.
13. J. R. Quinlan. C4.5: programs for machine learning. Morgan Kaufmann Publishers Inc., San Francisco, CA, USA, 1993.
14. M. A. Rajab, J. Zarfoss, F. Monrose, and A. Terzis. A multi-faceted approach to understanding the botnet phenomenon. In J. M. Almeida, V. A. F. Almeida, and P. Barford, editors, Internet Measurement Conference, pages 41-52. ACM, 2006.
15. A. Ramachandran and N. Feamster. Understanding the network-level behavior of spammers. SIGCOMM Comput. Commun. Rev, 36(4):291-302, 2006.
16. A. Ramachandran, N. Feamster, and D. Dagon. Revealing botnet membership using dnsbl counter-intelligence. In SRUTI'06: Proceedings of the 2nd conference on Steps to Reducing Unwanted Traffic on the Internet, pages 8-8, Berkeley, CA, USA, 2006. USENIX Association.
17. G. P. Schaffer. Worms and viruses and botnets, oh my!: Rational responses to emerging internet threats. IEEE Security and Privacy, 4(3):52-58, 2006.
18. W. T. Strayer, R. Walsh, C. Livadas, and D. Lapsley. Detecting botnets with tightcommand and control. Local Computer Networks, Proceedings 2006 31st IEEE Conference on, pages 195-202, Nov. 2006.
19. V. Vapnik, S. E. Golowich, and A. J. Smola. Support vector method for function approximation, regression estimation and signal processing. In M. Mozer, M. I. Jordan, and T. Petsche, editors, NIPS, pages 281-287. MIT Press, 1996.