Botnet: Classification, attacks, detection, tracing, and preventive measures

Eurasip Journal on Wireless Communications and Networking

Volumn 2009, Issue , 2009, Pages

  Xiao, Yang ^a   Liu, Jing ^a   Ghaboosi, Kaveh ^b   Deng, Hongmei ^c   Zhang, Jingyuan ^a  

^a Department of Computer Science   (United States)

^b UNIVERSITY OF OULU   (Finland)

^c INTELLIGENT AUTOMATION INC   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BOTNETS; CLASSIFICATION ,; FUNDAMENTAL CONCEPTS; INITIAL STAGES; POSSIBLE FUTURES; PREVENTIVE MEASURES; WIRED AND WIRELESS;

EID: 70449412215     PISSN: 16871472     EISSN: 16871499     Source Type: Journal    
DOI: 10.1155/2009/692654     Document Type: Article

References (49)

1. Ono K., Kawaishi I., Kamon T., Trend of botnet activities Proceedings of the 41st Annual IEEE Carnahan Conference on Security Technology (ICCST 07) October 2007 Ottawa, Canada 243 249
2. Wikipedia, Internet bot. http://en.wikipedia.org/wiki/Internetbot
3. Wikipedia, Botnet. http://en.wikipedia.org/wiki/Botnet
4. Thuraisingham B., Data mining for security applications: mining concept-drifting data streams to detect peer to peer botnet traffic Proceedings of the IEEE International Conference on Intelligence and Security Informatics (ISI 08) June 2008 Taipei, Taiwan
5. Mazzariello C., IRC traffic analysis for botnet detection Proceedings of the 4th International Symposium on Information Assurance and Security (IAS 08) September 2008 Napoli, Italy 318 323
6. McCarty B., Botnets: big and bigger IEEE Security and Privacy 2003 1 4 87 90
7. Schaffer G. P., Worms and viruses and botnets, oh my!: rational responses to emerging internet threats IEEE Security and Privacy 2006 4 3 52 58
8. Mirkovic J., Prier G., Reiher P., Attacking DDoS at the source Proceedings of the 10th IEEE International Conference on Network Protocols (ICNP 02) November 2002 Paris, France 312 321
9. Bacher P., Holz T., Kotter M., Wicherski G., Know your Enemy: Tracking Botnets. http://www.honeynet.org/papers/bots
10. Holz T., Marechal S., Raynal F., New threats and attacks on the world wide web IEEE Security and Privacy 2006 4 2 72 75
11. Abu Rajab M., Zarfoss J., Monrose F., Terzis A., A multifaceted approach to understanding the botnet phenomenon Proceedings of the 6th ACM SIGCOMM Internet Measurement Conference (IMC 06) October 2006 Rio de Janeriro, Brazil 41 52
12. Levy E., The making of a spam zombie army: dissecting the sobig worms IEEE Security and Privacy 2003 1 4 58 59
13. Cook D., Hartnett J., Manderson K., Scanlan J., Catching spam before it arrives: domain specific dynamic blacklists Proceedings of the Australasian Workshops on Grid Computing and E-Research January 2006 Hobart, Australia 193 202
14. Jung J., Sit E., An empirical study of spam traffic and the use of DNS black lists Proceedings of the 4th ACM SIGCOMM Internet Measurement Conference (IMC 04) October 2004 Taormina, Italy 370 378
15. Ramachandran A., Feamster N., Dagon D., Revealing botnet membership using DNSBL counter-intelligence 2 Proceedings of the 2nd Conference on Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI 06) 2006 San Jose, Calif, USA 8
16. Govil J., Examining the criminology of bot zoo Proceedings of the 6th International Conference on Information, Communications and Signal Processing (ICICS 07) December 2007 Singapore 1 6
17. Barford P., Yegneswaran V., An inside look at botnets Proceedings of the ARO-DHS Special Workshop on Malware Detection 2006 Springer Advances in Information Security
18. Puri R., Bots and botnets: an overview 2003 SANS Institute
19. Strayer W. T., Walsh R., Livadas C., Lapsley D., Detecting botnets with tight command and control Proceedings of the 31st Annual IEEE Conference on Local Computer Networks (LCN 06) November 2006 Tampa, Fla, USA 195 202
20. Akiyama M., Kawamoto T., Shimamura M., Yokoyama T., Kadobayashi Y., Yamaguchi S., A proposal of metrics for botnet detection based on its cooperative behavior Proceedings of the International Symposium on Applications and the Internet Workshops January 2007 Washington, DC, USA 82
21. Binkley J. R., Singh S., An algorithm for anomaly-based botnet detection Proceedings of the 2nd Conference on Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI 06) 2006 San Jose, Calif, USA 7
22. Cooke E., Jahanian F., Mcpherson D., The zombie roundup: understanding, detecting, and disrupting botnets Proceedings of the Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI 05) 2005 Cambridge, Mass, USA 6
23. Livadas C., Walsh R., Lapsley D., Strayer W. T., Using machine learning techniques to identify botnet traffic Proceedings of the 31st Annual IEEE Conference on Local Computer Networks (LCN 06) November 2006 Tampa, Fla, USA 967 974
24. Holz T., Steiner M., Dahl F., Biersack E. W., Freiling F., Measurement and mitigation of peer-to-peer-based botnets: a case study on storm worm Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats April 2008 San Francisco, Calif, USA 1 9
25. Wang P., Sparks S., Zou C. C., An advanced hybrid peer-to-peer botnet Proceedings of the 1st Workshop on Hot Topics in Understanding Botnets July 2008 Cambridge, Mass, USA 2
26. Lemos R., Bot software looks to improve peerage. http://www. securityfocus.com/news/11390
27. Arce I., levy E., An analysis of the slapper worm IEEE Security Privacy Magazine 2003 1 1 82 87
28. Stewart J., Sinit P2P Trojan analysis. http://www.secureworks.com/ research/threats/sinit/
29. Stewart J., Phatbot Trojan analysis. http://www.secureworks.com/research/ threats/phatbot/?threat=phatbot
30. Langin C., Zhou H., Rahimi S., A model to use denied Internet traffic to indirectly discover internal network security problems Proceedings of the IEEE International Performance, Computing, and Communications Conference (IPCCC 08) December 2008 Austin, Tex, USA 486 490
31. Freiling F. C., Holz T., Wicherski G., Botnet tracking: exploring a root-cause methodology to prevent distributed denial-of-service attacks 3679 Proceedings of the 10th European Symposium on Research in Computer Security (ESORICS 05) September 2005 Milan, Italy Springer 319 335 Lecture Notes in Computer Science
32. Pappas K., Back to basics to fight botnets Communications News 2008 45 5 12
33. Sroufe P., Phithakkitnukoon S., Dantu R., Cangussu J., Email shape analysis for spam botnet detection Proceedings of the 6th IEEE Consumer Communications and Networking Conference (CCNC 09) January 2009 Las Vegas, Nev, USA 1 2
34. Chiang K., Lloyd L., A case study of the restock rootkit and spam bot Proceedings of the 1st Workshop on Hot Topics in Understanding Botnets 2007 Cambridge, Mass, USA 10
35. Brodsky A., Brodsky D., A distributed content independent method for spam detection Proceedings of the 1st Workshop on Hot Topics in Understanding Botnets 2007 Cambridge, Mass, USA 3
36. Xie Y., Yu F., Achan K., Panigrahy R., Hulten G., Osipkov I., Spamming botnets: signatures and characteristics 38 Proceedings of the ACM SIGCOMM Conference on Data Communication (SIGCOMM 08) August 2008 Seattle, Wash, USA 171 182
37. Zou C. C., Cunningham R., Honeypot-aware advanced botnet construction and maintenance Proceedings of the International Conference on Dependable Systems and Networks (DSN 06) June 2006 Philadelphia, Pa, USA 199 208
38. Corey J., Advanced honey pot identification and exploitation. 2004, http://www.ouah.org/p63-0x09.txt
39. Seifried K., Honeypotting with VMware basics. 2002, http://www.seifried. org/security/index.html
40. Honeyd security advisory 2004001, Remote detection via simple probe packet. 2004, http://www.honeyd.org/adv.2004-01.asc
41. Bethencourt J., Franklin J., Vernon M., Mapping internet sensors with probe response attacks Proceedings of the 14th Conference on USENIX Security Symposium August 2005 Baltimore, Md, USA 193 208
42. Krawetz N., Anti-Honeypot technology IEEE Security and Privacy 2004 2 1 76 79
43. Racine S., Analysis of internet relay chat usage by DDoS zombies, M.S. thesis April 2004 Zurich, Switzerland Swiss Federal Institute of Technology
44. Kugisaki Y., Kasahara Y., Hori Y., Sakurai K., Bot detection based on traffic analysis Proceedings of the International Conference on Intelligent Pervasive Computing (IPC 07) October 2007 Jeju Island, South Korea 303 306
45. Choi H., Lee H., Lee H., Kim H., Botnet detection by monitoring group activities in DNS traffic Proceedings of the 7th IEEE International Conference on Computer and Information Technology (CIT 07) October 2007 Fukushima, Japan 715 720
46. Dagon D., Botnet detection and response, the network is the infection. 2005, http://www.caida.org/workshops/dns-oarc/200507/slides/oarc0507-Dagon.pdf
47. Villamarin-Salomon R., Brustoloni J. C., Identifying botnets using anomaly detection techniques applied to DNS traffic Proceedings of the 5th IEEE Consumer Communications and Networking Conference January 2008 Las Vegas, Nev, USA 476 481
48. Schonewille A., van Helmond D. J., The domain name service as an IDS, M.S. thesis February 2006 Amsterdam, The Netherlands University of Amsterdam
49. Hu X., Knyz M., Shin K. G., RB-Seeker: auto-detection of redirection botnets Proceedings of 16th Annual Network Distributed System Security Symposium (NDSS 09) February 2009