Feature selection for detection of peer-to-peer botnet traffic

Compute 2013 - 6th ACM India Computing Convention: Next Generation Computing Paradigms and Technologies

Volumn , Issue , 2013, Pages

  Narang, Pratik ^a   Reddy, Jagan Mohan ^a   Hota, Chittaranjan ^a  

^a BIRLA INSTITUTE OF TECHNOLOGY AND SCIENCE   (India)

Author keywords

botnet; classification; feature selection; machine learning; peer to peer

Indexed keywords

BAYESIAN NETWORK CLASSIFIERS; BOTNET; COMPARISON OF PERFORMANCE; FEATURE SELECTION ALGORITHM; INTRUSION DETECTION SYSTEMS; MACHINE LEARNING TECHNIQUES; NAVE BAYES CLASSIFIERS; PEER TO PEER;

CLASSIFICATION (OF INFORMATION); DECISION TREES; FEATURE EXTRACTION; LEARNING SYSTEMS; PRINCIPAL COMPONENT ANALYSIS;

LEARNING ALGORITHMS;

EID: 84888150566     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2522548.2523133     Document Type: Conference Paper

References (34)

1. Citadel and zeus. article available online:. https://www.botnets.fr/ index.php/Citadel-ZeuS-bot. Accessed on 1stJuly 2013.
2. Open malware website:. http://http://openmalware.org/. Accessed on 10 May 2013.
3. Wordpress botnet attack. available online at:. http://security. stackexchange.com/q/34482/9778. Accessed on 18th April 2013.
4. M. Bailey, E. Cooke, F. Jahanian, Y. Xu, and M. Karir. A survey of botnet technology and defenses. In Conference For Homeland Security, 2009. CATCH'09. Cybersecurity Applications & Technology, pages 299-304. IEEE, 2009.
5. BBC. Anonymous wikileaks supporters mull change in tactics. available online:. http://www.bbc.co.uk/news/mobile/technology-11968605. Accessed on 09 June 2013.
6. M. Bednarczyk. jnetpcap website. http://jnetpcap.com. Accessed on 7 May 2013.
7. P. E. Berg. Behavior-based Classification of Botnet Malware. Gjøvik University College, 2011.
8. N. Brownlee. Netramet & nemac reference manual v4. 3, 1999.
9. S. Chebrolu, A. Abraham, and J. P. Thomas. Feature deduction and ensemble design of intrusion detection systems. Computers & Security, 24(4):295-307, 2005.
10. M. Dash and H. Liu. Consistency-based search in feature selection. Artificial intelligence, 151(1):155-176, 2003.
11. J. Finkle. Microsoft, fbi take aim at global cybercrime ring. article on citadel botnet, available online:. http://www.smh.com.au. Accessed on 09 June 2013.
12. M. Foukarakis, D. Antoniades, S. Antonatos, and E. P. Markatos. Flexible and high-performance anonymization of netflow records using anontool. In Security and Privacy in Communications Networks and the Workshops, 2007. SecureComm 2007. Third International Conference on, pages 33-38. IEEE, 2007.
13. T. Greene. Zeus botnet has a new use: Stealing bank access codes via sms. available online at:. http://www.networkworld.com/news/2010/092910-zeus-botnet- sms-banks.html. Accessed on 9th June 2013.
14. M. Hall, E. Frank, G. Holmes, B. Pfahringer, P. Reutemann, and I. H. Witten. The weka data mining software: an update. ACM SIGKDD Explorations Newsletter, 11(1):10-18, 2009.
15. M. A. Hall. Correlation-based feature selection for machine learning. PhD thesis, The University of Waikato, 1999.
16. H. Hang, X. Wei, M. Faloutsos, and T. Eliassi-Rad. Entelecheia: Detecting p2p botnets in their waiting stage. In IFIP Networking, 2013.
17. I. Jolliffe. Principal component analysis. Wiley Online Library, 2005.
18. J. LeClaire. Wordpress sites attacked; may be prep for ddos barrage. available online at:. http://www.cio-today.com/news/WordPress-Web-Sites-Under- Attack/story.xhtml?story-id=033003176VMR. Accessed on 18th April 2013.
19. C. Livadas, R. Walsh, D. Lapsley, and W. T. Strayer. Using machine learning techniques to identify botnet traffic. In Local Computer Networks, Proceedings 2006 31st IEEE Conference on, pages 967-974. IEEE, 2006.
20. M. V. Mahoney and P. K. Chan. An analysis of the 1999 darpa/lincoln laboratory evaluation data for network anomaly detection. In Recent Advances in Intrusion Detection, pages 220-237. Springer, 2003.
21. Mila. Contagio-dump blog. http://www.contagiodump.blogspot.in. Accessed on 10 May 2013.
22. H. T. Nguyen, K. Franke, and S. Petrovic. Towards a generic feature-selection measure for intrusion detection. In Pattern Recognition (ICPR), 2010 20th International Conference on, pages 1529-1532. IEEE, 2010.
23. S.-K. Noh, J.-H. Oh, J.-S. Lee, B.-N. Noh, and H.-C. Jeong. Detecting p2p botnets using a multi-phased flow model. In Digital Society, 2009. ICDS'09. Third International Conference on, pages 247-253. IEEE, 2009.
24. B. Rahbarinia, R. Perdisci, A. Lanzi, and K. Li. Peerrush: Mining for unwanted p2p traffic. In Detection of Intrusions and Malware, and Vulnerability Assessment, volume 7967 of Lecture Notes in Computer Science, pages 62-82. Springer Berlin Heidelberg, 2013.
25. S. Saad, I. Traore, A. Ghorbani, B. Sayed, D. Zhao, W. Lu, J. Felix, and P. Hakimian. Detecting p2p botnets through network behavior analysis and machine learning. In Privacy, Security and Trust (PST), 2011 Ninth Annual International Conference on, pages 174-180. IEEE, 2011.
26. R. Schoof and R. Koning. Detecting peer-to-peer botnets. University of Amsterdam, 2007.
27. A. H. Sung and S. Mukkamala. The feature selection and intrusion detection problems. In Advances in Computer Science-ASIAN 2004. Higher-Level Decision Making, pages 468-482. Springer, 2005.
28. P.-N. Tan et al. Introduction to data mining. Pearson Education India, 2007.
29. P. Van Der Putten and M. Van Someren. A bias-variance analysis of a real world learning problem: The coil challenge 2000. Machine Learning, 57(1-2):177-195, 2004.
30. N. Williams, S. Zander, and G. Armitage. A preliminary performance comparison of five machine learning algorithms for practical ip traffic flow classification. ACM SIGCOMM Computer Communication Review, 36(5):5-16, 2006.
31. I. H. Witten and E. Frank. Data Mining: Practical machine learning tools and techniques. Morgan Kaufmann, 2005.
32. D. Wood. The skype is no longer the limit-new ways malware keeps in touch with your friends. 2010.
33. T.-F. Yen and M. K. Reiter. Are your hosts trading or plotting? telling p2p file-sharing and bots apart. In Distributed Computing Systems (ICDCS), 2010 IEEE 30th International Conference on, pages 241-252. IEEE, 2010.
34. C. York. Wordpress attacked by botnet in massive ddos onslaught. available online at:. http://www.huffingtonpost.co.uk/2013/04/15/wordpress- botnet-attack-n-3083819.html. Accessed on 18th April 2013.