Collaboration-based botnet detection architecture

2009 2nd International Conference on Intelligent Computing Technology and Automation, ICICTA 2009

Volumn 2, Issue , 2009, Pages 375-378

  Wang, Hailong ^a   Gong, Zhenghu ^a  

^a NATIONAL UNIVERSITY OF DEFENSE TECHNOLOGY   (China)

Author keywords

Achitecture; Botnet; Botnet detection; Collaboration; Network security

Indexed keywords

COLLABORATION NETWORK; COLLABORATIVE MODEL; DETECTION ACCURACY; DETECTION CAPABILITY;

COMPUTER SCIENCE; FEATURE EXTRACTION; INFORMATION DISSEMINATION; INTELLIGENT COMPUTING; INTERNET;

NETWORK SECURITY;

EID: 71949103701     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICICTA.2009.326     Document Type: Conference Paper

References (17)

1. Geer D, "Malicious bots threaten network security," IEEE Computer, 2005, 38(1):18-20.
2. Zhuge JW, Han XH, Zhou YL, Ye ZY, and Zou W, "Research and Development of Botnets," Journal of Software, 2008, 19(3):702-715(in Chinese with English abstract).
3. I M. Rajab, J. Zarfoss, F. Monrose, and A. Terzis, "A multi-faceted approach to understanding the Botnet phenomenon," In Proceedings of ACM SIGCOMM/USENIX Internet Measurement Conference (IMC 06), Brazil, October 2006.
4. A. Ramachandran, N. Feamster, and D. Dagon, "Revealing Botnet membership using DNSBL counterintelligence," In Proceedings of USENIX SRUTI' 06, 2006.
5. Cheng JR, Yin JP, Liu Y, and Zhong JW, "Advances in the Honeypot and Honeynet Technologies," Journal of Computer Research and Development, 2008, 45(Suppl1):375-378 (in Chinese with English abstract).
6. G. Gu, P. Porras, V. Yegneswaran, M. Fong, and W. Lee, "BotHunter: Detecting malware infection through ids-driven dialog correlation," In Proceedings of the 16th USENIX Security Symposium (Security' 07), 2007.
7. J. R. Binkley and S. Singh, "An algorithm for anomaly-based Botnet detection," In Proceedings of USENIX SRUTI' 06, pp. 43-48, July 2006.
8. Lee Jae-Seo, Jeong Hyun Cheol, Park Jun-Hyung, Kim Minsoo, and Noh Bong-Nam, "The activity analysis of malicious http-based botnets using degree of periodic repeatability," Proceedings - 2008 International Conference on Security Technology, SecTech 2008, pp. 83-86, 2008.
9. Choi H, Lee H, Lee H, et al, "Botnet detection by monitoring group activities in DNS traffic," 7th IEEE International Conference on Computer and Information Technology, OCT 16-19, 2007 Aizu-Wakamatsu City, JAPAN.
10. Matthew Steggink and Igor Idziejczak, "Detection of peer-to-peer botnets," Masters Thesis, University of Amsterdam, 2008.
11. Lu W and Ghorbani AA, "Bots Behaviors vs. Human Behaviors on Large-Scale Communication Networks (Extended Abstract)," 11th International Symposium on Recent Advances in Intrusion Detection, SEP 15-17, 2008 MIT Lincoln Lab, Cambridge, MA.
12. G. Gu, J. Zhang, and W. Lee, "BotSniffer: Detecting Botnet command and control channels in network traffic," In Proceedings of the 15th Annual Network and Distributed System Security Symposium (NDSS' 08), 2008.
13. G. Gu, J. Zhang, R. Perdisci and W. Lee, "Botminer: Clustering analysis of network traffic for protocol- and structure-independent Botnet detection," In Proceedings of the 17th USENIX Security Symposium (Security' 08), 2008.
14. Robert Erbacher, Adele Cutler, Pranab Banerjee, and Jim Marshall, "A Multi-Layered Approach to Botnet Detection," Security and Management 2008: 301-308, 2008.
15. Paxton N, Ahn GJ, and Chu B, "Towards practical framework for collecting and analyzing network-centric attacks," IEEE International Conference on Information Reuse and Integration, AUG 13-15, 2007 Las Vegas, NV.
16. Zhang Zonghua and Kadobayashi Youki, "A holistic perspective on understanding and breaking botnets: Challenges and countermeasures," Journal of the National Institute of Information and Communications Technology, vol. 55, pp. 43-59, June/September 2008.
17. Ji Seung Goo, Im Chae Tae, Kim Mi Joo, and Jeong Hyun Cheol, "Botnet detection and response architecture for offering secure internet services," 2008 International Conference on Security Technology, SecTech 2008, pp. 101-104, 2008.