A survey of botnet and botnet detection

Proceedings - 2009 3rd International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2009

Volumn , Issue , 2009, Pages 268-273

  Feily, Maryam ^a   Shahrestani, Alireza ^b   Ramadass, Sureswaran ^a  

^a SCHOOL OF PHYSICS   (Malaysia)

^b UNIVERSITY OF MALAYA   (Malaysia)

Author keywords

Botnet; Botnet detection; Cyber security

Indexed keywords

BOTNET; BOTNET DETECTION; BOTNETS; CLICK FRAUD; COMMAND AND CONTROL; CYBER-SECURITY; CYBERCRIME; DETECTION TECHNIQUE; DISTRIBUTED DENIAL OF SERVICE ATTACK; DISTRIBUTED PLATFORMS; ILLEGAL ACTIVITIES; MALWARES; PHISHING; RESEARCH TOPICS;

COMPUTER CRIME; LAWS AND LEGISLATION; NETWORK SECURITY;

SURVEYS;

EID: 70449466618     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECURWARE.2009.48     Document Type: Conference Paper

References (34)

1. B. Saha and A, Gairola, "Botnet: An overview," CERT-In White PaperCIWP-2005-05, 2005.
2. M. Rajab, J. Zarfoss, F. Monrose, and A. Terzis, "A multifaceted approach to understanding the botnet phenomenon," in Proc. 6th ACM SIGCOMM Conference on Internet Measurement (IMC'06), 2006, pp. 41-52.
3. N. Ianelli, A. Hackworth, "Botnets as a vehicle for online crime," CERT Request for Comments (RFC) 1700, December 2005.
4. Honeynet Project and Research Alliance. Know your enemy: Tracking Botnets, March 2005. See http://www. honeynet.org/papers/bots/.
5. G. Schaffer, "Worms and Viruses and Botnets, Oh My! : Rational Responses to Emerging Internet Threats", IEEE Security & Privacy, 2006.
6. E. Cooke, F. Jahanian, and D. McPherson, "The zombie roundup: Understanding, detecting, and disrupting botnets," in Proc. Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI'05), 2005, pp. 39-44.
7. A. Ramachandran and N. Feamster, "Understanding the network-level behavior of spammers," in Proc. ACM SIGCOMM, 2006.
8. Z. Zhu, G. Lu, Y. Chen, Z. J. Fu, P.Roberts, K. Han, "Botnet Research Survey," in Proc. 32nd Annual IEEE International Conference on Computer Software and Applications (COMPSAC '08), 2008, pp.967-972.
9. J. B. Grizzard, V. Sharma, C. Nunnery, B. B. Kang, and D. Dagon, "Peer-to-peer botnets: Overview and case study," in Proc. 1st Workshop on Hot Topics in understanding Botnets, 2007.
10. P. Wang, S. Sparks, and C. C. Zou, "An advanced hybrid peer-to-peer botnet," in Proc. 1st Workshop on Hot Topics in understanding Botnets, 2007.
11. C. Kalt, "Internet Relay Chat: Client Protocol," Request for Comments (RFC) 2812 (Informational), April 2000.
12. A. Karasaridis, B. Rexroad, and D. Hoeflin, "Wide-scale botnet detection and characterization," in Proc. 1st Workshop on Hot Topics in Understanding Botnets, 2007.
13. K. K. R. Choo, "Zombies and Botnets," Trends and issues in crime and criminal justice, no. 333, Australian Institute of Criminology, Canberra, March 2007.
14. D. Dagon, G. Gu , C.P. Lee, W. Lee, "A Taxonomy of Botnet Structures," in Proc. 23rd Annual Computer Security Applications Conference (ACSAC 2007), 2007, pp. 325-339.
15. H. Choi, H. Lee, H. Lee, and H. Kim, "Botnet Detection by Monitoring Group Activities in DNS Traffic," in Proc. 7th IEEE International Conference on Computer and Information Technology (CIT 2007), 2007, pp.715-720.
16. P. Vixie, S. Thomson, Y. Rekhter, and J. Bound, "Dynamic updates in the domain name system(dns update)," 1997. http://www.faqs.org/rfcs/ rfc2136.html/.
17. R.Villamarin-Salomon and J.C. Brustoloni, "Identifying Botnets Using Anomaly Detection Techniques Applied to DNS Traffic," in Proc. 5th IEEE Consumer Communications and Networking Conference (CCNC 2008), 2008, pp. 476-481.
18. N. Provos, "A virtual honeypot framework," in Proc. 13th USENIX Security Symposium, 2004, pp. 1-14.
19. M. Vrable, J. Ma, J. Chen, D. Moore, E.Vandekieft, A. C. Snoeren, G. M. Voelker, and S.Savage," Scalability, Fidelity and Containment in the Potemkin Virtual Honeyfarm," in Proc. ACM SIGOPS Operating System Review, vol. 39(5), pp. 148-162, 2005.
20. F. Freiling, T. Holz, and G. Wicherski, "Botnet tracking: Exploring a root-cause methodology to prevent distributed denial-of-service attacks," in Proc. 10th European Symposium on Research in Computer Security (ESORICS), vol. Lecture Notes in Computer Science 3676, September 2005, pp. 319-335.
21. P. Barford and V. Yegneswaran, "An Inside Look at Botnets," ser. Advances in Information Security, Springer, 2006.
22. D. Dagon, C. Zou, and W. Lee, "Modeling botnet propagation using time zones," in Proc. 13th Network and Distributed System Security Symposium (NDSS'06), 2006.
23. th nternational Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, 2007.
24. Snort IDS web page. http://www.snort.org, March 2006.
25. J.R. Binkley and S.Singh, "An algorithm for anomaly-based botnet detection," in Proc. USENIX Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI'06), , 2006, pp 43-48.
26. th Annual Network and distributed System Security Symposium (NDSS'08), 2008.
27. D. Dagon, "Botnet Detection and Response, The Network is the Infection," in OARC Workshop, 2005.
28. J. Kristoff, "Botnets," in 32nd Meeting of the North American Network Operators Group, 2004.
29. A. Schonewille and D.J. van Helmond. "The Domain Name Service as an IDS," Master's Project, University of Amsterdam, Netherlands, Feb 2006, http://staff.science.uva.nl/~delaat/snb-2005-2006/p12/report.pdf
30. N. F. A. Ramachandran and D. Dagon, "Revealing botnet membership using dnsbl counter-intelligence," in Proc. 2nd Workshop on Steps to Reducing Unwanted Traffic on the Internet (SRUTI '06), 2006.
31. J. Goebel and T. Holz, "Rishi: Identify bot contaminated hosts by irc nickname evaluation," in Proc. 1st Workshop on Hot Topics in Understanding Botnets, 2007.
32. W. Strayer, D. Lapsley, B. Walsh, and C. Livadas, Botnet Detection Based on Network Behavior, ser. Advances in Information Security. Springer, 2008, PP. 1-24.
33. M. M. Masud, T. Al-khateeb, L. Khan, B. Thuraisingham, K. W. Hamlen, " Flow-based identification of botnet traffic by mining multiple log file," in Proc. International Conference on Distributed Frameworks & Applications (DFMA), Penang, Malaysia, 2008.
34. th USENIX Security Symposium, 2008.