Framework for zombie detection using neural networks

Proceedings - 2009 4th International Conference on Internet Monitoring and Protection, ICIMP 2009

Volumn , Issue , 2009, Pages 14-20

  Salvador, Paulo ^a   Nogueira, António ^a   França, Ulisses ^a   Valadas, Rui ^a  

^a UNIVERSITY OF AVEIRO   (Portugal)

Author keywords

Botnet; Illicit traffic; Neural network; Zombie

Indexed keywords

ANTI VIRUS; ANTI-SPYWARES; BOTNET; COMPUTATIONALLY EFFICIENT; CONTROLLED ENVIRONMENT; ILLICIT TRAFFIC; INTERNET SECURITY; INTRUSION DETECTION SYSTEMS; MALICIOUS SOFTWARE; MALICIOUS TRAFFIC; NETWORK APPLICATIONS; NETWORK FIREWALLS; NETWORK LEVEL; NEW APPROACHES; ORGANIZED NETWORKS; PERSONAL FIREWALLS; REAL NETWORKS; TRAFFIC PROFILE; TRAFFIC TRACES; ZOMBIE;

COMPUTER CRIME; COMPUTER SYSTEM FIREWALLS; INTERNET; INTRUSION DETECTION; NEURAL NETWORKS;

LOCAL AREA NETWORKS;

EID: 70349459587     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICIMP.2009.10     Document Type: Conference Paper

References (21)

1. P. Baecher, M. Koetter, T. Holz, M. Dornseif, and F. Freiling. The nepenthes platform: An efficient approach to collect malware. In International Symposium on Recent Advances in Intrusion Detection RAID'06), September 2006.
2. P. Barford and V. Yegneswaran. An inside look at botnets. Springer Verlag, 2006.
3. J. Binkley and S. Singh. An algorithm for anomaly-based botnet detection. In USENIX SRUTI'06, 2006.
4. M. Collins, T. Shimeall, S. Faber, J. Janies, R. Weaver, M. Shon, and J. Kadane. Using uncleanliness to predict future botnet addresses. In ACM/USENIX Internet Measurement Conference IMC'07, 2007.
5. E. Cooke, F. Jahanian, and D. McPherson. The zombie roundup: Understanding, detecting, and disrupting botnets. In USENIX SRUTI'05, 2005.
6. D. Dagon, C. Zou, andW. Lee. Modeling botnet propagation using timezones. In 13th Annual Network and Distributed System Security Symposium NDSS'06, January 2006.
7. H. Debar, M. Becker, and D. Siboni. A neural network component for an intrusion detection system. Research in Security and Privacy, 1992. Proceedings., 1992 IEEE Computer Society Symposium on, pages 240-250, 4-6 May 1992.
8. H. Demuth and M. Beale. Neural Network Toolbox Users Guide. The MathWorks, Inc., 1998.
9. F. Freiling, T. Holz, , and G. Wicherski. Botnet tracking: Exploring a root-cause methodology to prevent denial of service attacks. In 10th European Symposium on Research in Computer Security (ESORICS'05), 2005.
10. J. Goebel and T. Rishi. Identify bot contaminated hosts by irc nickname evaluation. In USENIX HotBots'07, 2007.
11. G. Gu, R. Perdisci, J. Zhang, and W. Lee. Botminer: Clustering analysis of network traffic for protocol and structureindependent botnet detection. In 17th USENIX Security Symposium, 2008.
12. G. Gu, P. Porras, V. Yegneswaran, M. Fong, and W. Lee. Bothunter: Detecting malware infection through ids-driven dialog correlation. In 16th USENIX Security Symposium, 2007.
13. G. Gu, J. Zhang, and W. Lee. Botsniffer: Detecting botnet command and control channels in network traffic. In 15th Annual Network and Distributed System Security Symposium, 2008.
14. A. Karasaridis, B. Rexroad, and D. Hoeflin. Widescale botnet detection and characterization. In USENIX HotBots'07, 2007.
15. C. Livadas, R. Walsh, D. Lapsley, and W. Strayer. Using machine learning techniques to identify botnet traffic. In 2nd IEEE LCN Workshop on Network Security, 2006.
16. C. G. Looney. Pattern recognition using neural networks: theory and algorithms for engineers and scientists. Oxford University Press, Inc., New York, NY, USA, 1997.
17. K. Madsen, H. Nielsen, and O. Tingleff. Methods for Non-Linear Least Squares Problems. Technical University of Denmark, 2nd edition, 2004.
18. A. Nogueira, M. R. de Oliveira, P. Salvador, R. Valadas, and A. Pacheco. Classification of internet users using discriminant analysis and neural networks. In First Conference on Traffic Engineering for the Next Generation Internet, April 2005.
19. M. Rajab, J. Zarfoss, F. Monrose, and A. Terzis. A multifaceted approach to understanding the botnet phenomenon. In ACM SIGCOMM/USENIX Internet Measurement Conference IMC'06, October 2006.
20. A. Ramachandran, N. Feamster, and D. Dagon. Revealing botnet membership using dnsbl counterintelligence. In USENIX SRUTI, 2006.
21. M. Reiter and T. F. Yen. Traffic aggregation for malware detection. In Fifth GI International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, 2008.