Browsing behavior mimicking attacks on popular web sites for large botnets

2011 IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2011

Volumn , Issue , 2011, Pages 947-951

  Yu, Shui ^a   Zhao, Guofeng ^b   Guo, Song ^c   Yang, Xiang ^a   Vasilakos, Athanasios V ^d  

^a DEAKIN UNIVERSITY   (Australia)

^b CHONGQING UNIVERSITY OF POSTS AND TELECOMMUNICATIONS   (China)

^c UNIVERSITY OF AIZU   (Japan)

^d NATIONAL TECHNICAL UNIVERSITY OF ATHENS   (Greece)

Author keywords

attack simulation; botnet; browsing behavior

Indexed keywords

APPLICATION LAYERS; ATTACK SIMULATION; ATTACK TRAFFIC; BOTNET; BOTNETS; BROWSING BEHAVIOR; DDOS ATTACK; DETECTION ALGORITHM; FALSE NEGATIVE RATE; FALSE NEGATIVES; INTRUSION DETECTION SYSTEMS; INVERSE GAUSSIAN DISTRIBUTION; MARKOV MODEL; NOVEL APPLICATIONS; PARETO DISTRIBUTIONS; REAL TRAFFIC; STATISTICAL DISTRIBUTION; TIME INTERVAL; WEB PAGE; ZIPF-LIKE DISTRIBUTION;

COMPUTER SIMULATION; INTRUSION DETECTION; MARKOV PROCESSES; USER INTERFACES; WEBSITES;

BEHAVIORAL RESEARCH;

EID: 79960618060     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOMW.2011.5928949     Document Type: Conference Paper

References (21)

1. T. Peng, C. Leckie, and K. Ramamohanarao, "Survey of network-based defense mechanisms countering the dos and ddos problems," ACM Computing Survey, vol. 39, no. 1, 2007.
2. M. Edman and B. Yener, "On anonymity in an electronic society: A survey of anonymous communication systems," ACM Computing Survey, vol. 42, no. 1, 2009.
3. B. Stone-Gross, M. Cova, L. Cavallaro, B. Gilbert, M. Szydlowski, R. Kemmerer, C. Kruegel, and G. Vigna, "Your botnet is my botnet: Analysis of a botnet takeover," in CCS '09: Proceedings of the 2009 ACM conference on computer communication security, 2009.
4. M. Bailey, E. Cooke, F. Jahanian, Y. Xu, and M. Karir, "A survey of botnet technology and defenses," in Proceedings of the 2009 cybersecurity applications and technology conference for Homeland security, 2009.
5. S. Yu, W. Zhou, and R. Doss, "Information theory based detection against network behavior mimicking ddos attack," IEEE Communications Letters, vol. 12, no. 4, pp. 319-321, 2008.
6. A. El-Atawy, E. Al-Shaer, T. Tran, and R. Boutaba, "Adaptive early packet filtering for protecting firewalls against dos attacks," in Proceedings of the INFOCOM, 2009.
7. Y. Xie and S.-Z. Yu, "A large-scale hidden semi-markov model for anomaly detection on user browsing behaviors," IEEE/ACM Transactions on Networking, vol. 17, no. 1, pp. 54-65, 2009.
8. B. Stone-Gross, M. Cova, L. Cavallaro, B. Gilbert, M. Szydlowski, R. Kemmerer, C. Kruegel, and G. Vigna, "Your botnet is my botnet: Analysis of a botnet takeover," in Proceedings of the 2009 ACM conference on computer communication security, 2009.
9. C. Y. Cho, J. Caballero, C. Grier, V. Paxson, and D. Song, "Insights from the inside: A view of botnet management from infiltration," in Proceedings of USENIX LEET, 2010.
10. V. L. L. Thing, M. Sloman, and N. Dulay, "A survey of bots used for distributed denial of service attacks," in SEC, 2007, pp. 229-240.
11. M. A. Rajab, J. Zarfoss, F. Monrose, and A. Terzis, "My botnet is bigger than yours (maybe, better than yours): why size estimates remain challenging," in HotBots'07: Proceedings of the first conference on First Workshop on Hot Topics in Understanding Botnets, 2007.
12. L. Breslau, P. Cao, L. Fan, G. Phillips, and S. Shenker, "Web caching and zipf-like distributions: Evidence and implications," in Proceedings of the INFOCOM, 1999, pp. 126-134.
13. Z. K. Silagadze, "Citations and the zipf-mandelbrot's law," Complex Systems, vol. 11, p. 487, 1997.
14. A. Klemm, C. Lindemann, M. K. Vernon, and O. P. Waldhorst, "Characterizing the query behavior in peer-to-peer file sharing systems," in Proceedings of the 4th ACM SIGCOMM conference on Internet measurement. New York, NY, USA: ACM, 2004, pp. 55-67.
15. M. Hefeeda and O. Saleh, "Traffic modeling and proportional partial caching for peer-to-peer systems," IEEE/ACM Transactions on Networking, vol. 16, no. 6, pp. 1447-1460, 2008.
16. M. E. Crovella and A. Bestavros, "Self-similarity in world wide web traffic: evidence and possible causes," IEEE/ACM Transactions on Networking, vol. 5, no. 6, pp. 835-846, 1997.
17. B. A. Huberman, P. L. T. Pirolli, J. E. Pitkow, and R. M. Lukose, "Strong regularities in world wide web surfing," Science, vol. 280, no. 3, 1998.
18. M. Mitzenmacher, "A brief history of generative models for power law and lognornal distributions," Internet Mathematics, vol. 1, 2004.
19. W. J. Reed and M. Jorgensen, "The double pareto-lognormal distribution - a new parametric model for size distributions," Communication in Statistics - Theory and Methods, vol. 33, no. 8, pp. 1733-1753, 2003.
20. P. V. Mieghem, Performance Analysis of Communications Networks and Systems. New York, NY, USA: Cambridge University Press, 2005.
21. S. Burklen, P. J. Marron, S. Fritsch, and K. Rothermel, "User centric walk: An integrated approach for modeling the browsing behavior of users on the web," in ANSS '05: Proceedings of the 38th annual Symposium on Simulation. Washington, DC, USA: IEEE Computer Society, 2005, pp. 149-159.