On the effectiveness of structural detection and defense against P2P-based botnets

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2009, Pages 297-306

  Ha, Duc T ^a   Yan, Guanhua ^b   Eidenbenz, Stephan ^b   Ngo, Hung Q ^a  

^a State University of New York   (United States)

^b LOS ALAMOS NATIONAL LABORATORY   (United States)

Author keywords

Botnets; Kademlia; Mitigation; Monitoring; Structural analysis

Indexed keywords

AS CONTENT; BOTNETS; CLIENT SOFTWARE; COVERT COMMUNICATIONS; DISTRIBUTED SYSTEMS; EVENT-DRIVEN SIMULATIONS; KADEMLIA; MEASUREMENT-BASED STUDIES; MITIGATION; MITIGATION TECHNIQUES; P2P NETWORK; P2P PROTOCOLS; P2P-BASED; PEER-TO-PEER NETWORKS; REACHABILITY;

CLIENT SERVER COMPUTER SYSTEMS; COMPUTER SOFTWARE; MONITORING; NETWORK ARCHITECTURE; NETWORK PROTOCOLS; STRUCTURAL ANALYSIS; TEST FACILITIES; TESTBEDS;

COMPUTER SIMULATION;

EID: 70450080949     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2009.5270322     Document Type: Conference Paper

References (23)

1. http://www.emule-project.net.
2. http://www.amule.org.
3. Y. AZAR, A. FIAT, A. KARLIN, F. MCSHERRY, AND J. SAIA, Spectral analysis of data, in STOC '01: Proceedings of the thirty-third annual ACM symposium on Theory of computing, New York, NY, USA, 2001, ACM, pp. 619-626.
4. J. R. BINKLEY AND S. SINGH, An algorithm for anomaly-based botnet detection, in SRUTI'06: Proceedings of the 2nd conference on Steps to Reducing Unwanted Traffic on the Internet, Berkeley, CA, USA, 2006, USENIX Association.
5. S. BRIN AND L. PAGE, The anatomy of a large-scale hypertextual web search engine, vol. 30, Amsterdam, The Netherlands, The Netherlands, 1998, Elsevier Science Publishers B. V., pp. 107-117.
6. A. J. BURSTEIN, Conducting cybersecurity research legally and ethically, in LEET'08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats, 2008.
7. M. CASTRO, P. DRUSCHEL, A. GANESH, A. ROWSTRON, AND D. S. WALLACH, Secure routing for structured peer-to-peer overlay networks, in Proceedings of OSDI'02, 2002.
8. A. CLAUSET, C. R. SHALIZI, AND M. E. J. NEWMAN, Power-law distributions in empirical data. http://arxiv.org/abs/0706.1062.
9. D. DAGON, C. ZOU, AND W. LEE, Modeling botnet propagation using time zones, in NDSS, The Internet Society, 2006.
10. J. R. DOUCEUR, The sybil attack, in IPTPS '01: Revised Papers from the First International Workshop on Peer-to-Peer Systems, London, UK, 2002, Springer-Verlag, pp. 251-260.
11. http://securitywatch.eweek.com/exploits-and-attacks/everydns-opendns- under-botnet-ddos-attack.html.
12. FREILING, HOLZ, AND WICHERSKI, Botnet tracking: Exploring a root-cause methodology to prevent distributed denial-of-service attacks, in ESORICS: European Symposium on Research in Computer Security, LNCS, Springer-Verlag, 2005.
13. M. R. GAREY AND D. S. JOHNSON, Computers and intractability, W. H. Freeman and Co., San Francisco, Calif., 1979. A guide to the theory of NP-completeness, A Series of Books in the Mathematical Sciences.
14. C. GKANTSIDIS, M. MIHAIL, AND E. ZEGURA, Spectral analysis of internet topologies, vol. 1, March-3 April 2003, pp. 364-374 vol.1.
15. G. GU, V. YEGNESWARAN, AND MARTIN, Bothunter: Detecting malware infection through ids-driven dialog correlation, pp. 167-182.
16. T. HOLZ, M. STEINER, F. DAHL, E. BIERSACK, AND F. FREILING, Measurements and mitigation of peer-to-peer-based botnets: a case study on storm worm, in LEET'08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats, Berkeley, CA, USA, 2008, USENIX Association, pp. 1-9.
17. C. KANICH, K. LEVCHENKO, B. ENRIGHT, G. M. VOELKER, AND S. SAVAGE, The heisenbot uncertainty problem: challenges in separating bots from chaff, in LEET'08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats, 2008.
18. MAYMOUNKOV AND MAZIERES, Kademlia: A peer-to-peer information system based on the XOR metric, in International Workshop on Peer-to-Peer Systems (IPTPS), LNCS, vol. 1, 2002.
19. http://lynx.cis.fiu.edu:8000/twiki/bin/view/Public/PRIMEProject.
20. M. RAJAB, J. ZARFOXX, F. MONROSE, AND A. TERZIA, My botnet is bigger than yours (maybe, better than yours), Proceedings 2007 USENIX First workshop on Hot Topics in Understanding Botnets, (2007).
21. M. A. RAJAB, J. ZARFOSS, F. MONROSE, AND A. TERZIS, A multifaceted approach to understanding the botnet phenomenon, in Internet Measurement Conference, J. M. Almeida, V. A. F. Almeida, and P. Barford, eds., ACM, 2006, pp. 41-52.
22. E. V. RUITENBEEK AND W. H. SANDERS, Modeling peer-to-peer botnets, in Proceedings of IEEE QEST'08, 2008.
23. http://www.theregister.co.uk/2008/02/29/botnet-spam-deluge.