Al survey of botnet technology and defenses

Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009

Volumn , Issue , 2009, Pages 299-304

  Bailey, Michel ^a   Cooke, Evan ^a   Jahanian, Farnam ^a   Xu, Yunjing ^a   Karir, Manish ^a  

^a UNIVERSITY OF MICHIGAN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BOTNETS; GLOBAL INTERNET;

COMPUTER CONTROL SYSTEMS;

SURVEYS;

EID: 66249147541     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CATCH.2009.40     Document Type: Conference Paper

References (30)

1. M. Akiyama, T. Kawamoto, M. Shimamura, T. Yokoyama, Y. Kadobayashi, and S. Yamaguchi. A proposal of metrics for botnet detection based on its cooperative behavior. In Proceedings of the 2007 International Symposium on Applications and the InternetWorkshops(SAINT- W'07),Washington, DC, May 2007.
2. D. S. Anderson, C. Fleizach, S. Savage, and G. M. Voelker. Spamscatter: Characterizing internet scam hosting infrastructure. In Proceedings of the 16th USENIX Security Symposium (Security'07), Boston, MA, August 2007.
3. J. R. Binkley and S. Singh. An algorithm for anomalybased botnet detection. In Proceedings of the 2nd conference on Steps to Reducing Unwanted Traffic on the Internet (SRUTI'06), San Jose, CA, July 2006.
4. A. Broadsky and D. Broksky. A distributed content independent method for spam detection. In First Workshop on Hot Topics in Understanding Botnets (HotBots'07), Cambridge, MA, April 2007.
5. H. Choi, H. Lee, H. Lee, and H. Kim. Botnet detection by monitoring group activities in dns traffic. In Proceedings of the 7th IEEE International Conference on Computer and Information Technology (CIT'07), Washington, DC, October 2007.
6. E. Cooke, F. Jahanian, and D. McPherson. The zombie roundup: Understanding, detecting, and disrupting botnets. In Proceedings of the Steps to Reducing Unwanted Traffic on the Internet (SRUTI 2005 Workshop), Cambridge, MA, July 2005.
7. D. Dagon, G. Gu, C. P. Lee, and W. Lee. A taxonomy of botnet structures. In Twenty-Third Annual Computer Security Applications Conference (ACSAC'07), Florida, USA,November 2007.
8. D. Dagon, C. Zou, and W. Lee. Modeling botnet propagation using time zones. In Proceedings of the 13rd Network and Distributed System Security Symposium (NDSS'06), San Diego, CA, February 2006.
9. D. Dittrich and S. Dietrich. P2p as botnet command and control: a deeper insight. In Proceedings of the 2008 3rd International Conference on Malicious and Unwanted Software (Malware 2008), Alexandria, VA, Oct 2008.
10. S. Gianvecchio, M. Xie, Z.Wu, and H.Wang. Measurement and classification of huamans and bots in internet chat. In Proceedings of the 17th USENIX Security Symposium (Security' 08), San Jose, CA, July 2008.
11. J. Goebel and T. Holz. Rishi: Identify bot contaminated hosts by irc nickname evaluation. In First Workshop on Hot Topics in Understanding Botnets (HotBots'07), Cambridge, MA, April 2007.
12. J. B. Grizzard, V. Sharma, C. Nunnery, B. B. Kang, and D. Dagon. Peer-to-Peer Botnets: Overview and case study. In First Workshop on Hot Topics in Understanding Botnets (HotBots'07), Cambridge, MA, April 2007.
13. G. Gu, R. Perdisci, junjie Zhang, and W. Lee. BotMiner: Clustering analysis of network traffic for protocol- and structure-independent botnet detection. In Proceedings of the 17th USENIX Security Symposium (Security'08), San Jose, CA, July 2008.
14. G. Gu, P. Porras, V. Yegneswaran, M. Frog, and W. Lee. BotHunter: Detecting malware infection through ids-driven dialog correlation. In Proceedings of the 16th USENIX Security Symposium (Security'07), Boston, MA, August 2007.
15. G. Gu, J. Zhang, and W. Lee. BotSniffer: Detecting botnet command and control channels in network traffic. In Proceedings of the 15th Annual Network & Distributed System Security Symposium (NDSS'08), San Diego, CA, February 2008.
16. T. Holz, M. Steiner, F. Dahl, E. Biersack, and F. Freiling. Measurements and Mitigation of Peer-to-Peer- based Botnets: A case study on storm worm. In First UsenixWorkshop on Large-scale Exploits and Emergent Threats (LEET'08), San Francisco, CA, April 2008.
17. C. Kanich, K. Lechenko, B. Enright, G. M. Voelker, and S. Savage. The Heisenbot Uncertainty Problem: Challenges in separating bots from chaff. In First Usenix Workshop on Large-scale Exploits and Emergent Threats (LEET'08), San Francisco, CA, April 2008.
18. A. Karasaridis, B. Rexroad, and D. Hoeflin. Wide-scale botnet detection and characterization. In First Workshop on Hot Topics in Understanding Botnets (HotBots'07), Cambridge, MA, April 2007.
19. L. McLaughlin. Bot software spreads, causes new worries IEEE Distributed Systems Online, 5(6), June 2004.
20. Microsoft. Microsoft security intelligence report: Julydecember 2006. http://www.microsoft.com/technet/ security/default.mspx, May 2007.
21. N. Provos, D. McNamee, P. Mavrommatis, K. Wang, and N. Modadugu. The ghost in the browser: Analysis of webbased malware. In First Workshop on Hot Topics in Understanding Botnets, HotBots'07. USENIX, 2007.
22. M. A. Rajab, J. Zarfoss, F. Monrose, and A. Terzis. A multifaceted approach to understanding the botnet phenomenon. In Proceedings of Internet Measurement Conference 2006 (IMC'06), Rio de Janeiro, Brazil, October 2006. (Pubitemid 47165587)
23. M. A. Rajab, J. Zarfoss, F. Monrose, and A. Terzis. My Botnet is Bigger than Yours (Maybe, Better than Yours): why size estimates remain challenging. In First Workshop on Hot Topics in Understanding Botnets (HotBots'07), Cambridge, MA, April 2007.
24. A. Ramachandran, N. Feamster, and D. Dagon. Revealing botnet membership using dnsbl counter- intelligence. In Proceedings of the 2nd conference on Steps to Reducing Unwanted Traffic on the Internet (SRUTI'06), San Jose, CA, July 2006.
25. S. Small, J. Mason, and F. Monrose. To Catch a Predator: A natural language approach for eliciting malicious payloads. In Proceedings of the 17th USENIX Security Symposium (Security'08), San Jose, CA, July 2008.
26. W. T. Strayey, R.Walsh, C. Livadas, and D. Lapsley. Detecting botnets with tight command and control. In 31st IEEE Conference on Local Computer Networks (LCN06), Tampa, Florida, November 2006.
27. P. Wang, S. Sparks, and C. C. Zou. An advanced hybrid peer-to-peer botnet. In First Workshop on Hot Topics in Understanding Botnets (HotBots'07), Cambridge, MA, April 2007.
28. Y. Xie, F. Yu, K. Achan, R. Panigrahy, G. Hulten, and I. Osipkov. Spamming Botnets: Signatures and characteristics. In Proceedings of ACM SIGCOMM'08, Seattle,WA, August2008.
29. Z. Zhu, G. Lu, Y. Chen, Z. J. Fu, P. Roberts, and K. Han. Botnet research survey. In 2008 32nd Annual IEEE International Computer Software and Applications Conference (COMPSAC'08), Turku, Finland, July 2008.
30. L. Zhuang, J. Dunagan, D. R. Simon, H. J. Wang, I. Osipkov G. Hulten, and J. D. Tygar. Characterizing botnets from email spam records. In First Usenix Workshop on LargescaleE xploits and Emergent Threats (LEET'08), San Francisco, CA, April 2008.