Botnet detection revisited: Theory and practice of finding malicious P2P networks via Internet connection graphs

2013 IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2013

Volumn , Issue , 2013, Pages 435-440

  Ruehrup, Stefan ^a   Urbano, Pierfrancesco ^a   Berger, Andreas ^a   D'Alconzo, Alessandro ^a  

^a TELECOMMUNICATIONS RESEARCH CENTER VIENNA FTW   (Austria)

Author keywords

[No Author keywords available]

Indexed keywords

COMPLEX NETWORKS; DISTRIBUTED COMPUTER SYSTEMS; PEER TO PEER NETWORKS;

BOTNET DETECTIONS; COMMUNITY DETECTION; COMPLEX ALGORITHMS; CONNECTIVITY INFORMATION; INTERNET CONNECTION; PEER TO PEER (P2P) NETWORK; THEORY AND PRACTICE; TOPOLOGICAL PROPERTIES;

TOPOLOGY;

EID: 84882950393     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOMW.2013.6562902     Document Type: Conference Paper

References (16)

1. KadC-P2P library. http://kadc. sourceforge. net.
2. UMass Trace Repository. School of Computer Science, University of Massachusetts Amherst. http://traces. cs. umass. edu.
3. V. D. Blondel, J.-L. Guillaume, R. Lambiotte, and E. Lefebvre. Fast unfolding of communities in large networks. J. Stat. Mech., page P10008, 2008.
4. B. Coskun, S. Dietrich, and N. Memon. Friends of an enemy: identifying local members of peer-to-peer botnets using mutual contacts. In 26th Annual Computer Security Applications Conference, ACSAC '10, pages 131-140, 2010.
5. D. Dittrich and S. Dietrich. Discovery techniques for p2p botnets. Technical Report CS 2008-4, revision of 21 April 2009, Stevens Institute of Technology, 2009.
6. M. Ester, H. peter Kriegel, J. S, and X. Xu. A density-based algorithm for discovering clusters in large spatial databases with noise. In 2nd Int. Conf. on Knowledge Discovery and Data Mining (KDD-96), pages 226-231, 1996.
7. J. Francois, S. Wang, R. State, and T. Engel. Bottrack: Tracking botnets using netflow and pagerank. In Networking 2011, LNCS 6640, pages 1-14. Springer, 2011.
8. G. Gu, R. Perdisci, J. Zhang, and W. Lee. BotMiner: clustering analysis of network traffic for protocol-and structure-independent botnet detection. In 17th USENIX Security symposium, pages 139-154, 2008.
9. T. Karagiannis, K. Papagiannaki, and M. Faloutsos. BLINC: multilevel traffic classification in the dark. In SIGCOMM, pages 229-240, 2005.
10. P. Maymounkov and D. Mazières. Kademlia: A peer-to-peer information system based on the xor metric. In Revised Papers from the First International Workshop on Peer-to-Peer Systems, pages 53-65, 2002.
11. S. Nagaraja, P. Mittal, C.-Y. Hong, M. Caesar, and N. Borisov. Botgrep: finding p2p bots with structured graph analysis. In 19th USENIX conference on Security, USENIX Security'10, pages 7-7, 2010.
12. D. M. Nicol and N. Schear. Models of privacy preserving traffic tunneling. Simulation, 85(9):589-607, Sept. 2009.
13. N. Schear and D. M. Nicol. Performance analysis of real traffic carried with encrypted cover flows. In Workshop on Parallel and Distributed Simulation, pages 80-87, 2008.
14. M. Steiner, T. En-Najjary, and E. W. Biersack. Analyzing peer behavior in KAD. Technical Report RR-07-205, Institut Eurecom, Oct. 2007.
15. X. Xu, N. Yuruk, Z. Feng, and T. A. J. Schweiger. Scan: a structural clustering algorithm for networks. In 13th ACM SIGKDD int. conf. on Knowledge discovery and data mining, KDD '07, pages 824-833, 2007.
16. T. Yen and M. K. Reiter. Traffic aggregation for malware detection. In 5th Int. Conf. on Detection of Intrusions and Malware, and Vulnerability Assessment, DIMVA '08, pages 207-227. Springer, 2008.