A botnet-based command and control approach relying on swarm intelligence

Journal of Network and Computer Applications

Volumn 38, Issue 1, 2014, Pages 22-33

  Castiglione, Aniello ^a   De Prisco, Roberto ^a   De Santis, Alfredo ^a   Fiore, Ugo ^b   Palmieri, Francesco ^c  

^a UNIVERSITY OF SALERNO   (Italy)

^b UNIVERSITY OF NAPLES FEDERICO II   (Italy)

^c SECOND UNIVERSITY OF NAPLES   (Italy)

Author keywords

Ant colony optimization; Botnets; Command and control; Malware based management for homeland defense; Stigmergy; Swarm intelligence

Indexed keywords

ANT COLONY OPTIMIZATION; ARTIFICIAL INTELLIGENCE; BOTNET; COMPUTER CRIME; DISTRIBUTED COMPUTER SYSTEMS; FAULT TOLERANCE; MALWARE; NETWORK ARCHITECTURE;

BOTNETS; COMMAND AND CONTROL; COMMAND-AND-CONTROL ARCHITECTURES; COMMUNICATION INFRASTRUCTURE; DEGREE-CONSTRAINED MINIMUM SPANNING TREE; HETEROGENEOUS COMMUNICATION; HOMELAND DEFENSE; STIGMERGY;

SWARM INTELLIGENCE;

EID: 84897599943     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2013.05.002     Document Type: Article

References (31)

1. Awerbuch B, Holmer D, Rubens H. Provably secure competitive routing against proactive byzantine adversaries via reinforcement learning. Technical Report, In JHU Tech Report Version 1; 2003.
2. Barabási A-L, Albert R. Emergence of scaling in random networks. Science 1999;286 (5439):509-12.
3. Berger A, Hefeeda M. Exploiting SIP for botnet communication. In: 5th IEEE workshop on secure network protocols (NPSec 2009); 2009. p. 31-6. http://dx.doi.org/10.1109/NPSEC.2009.5342244.
4. Binsalleeh H, Ormerod T, Boukhtouta A, Sinha P, Youssef A, Debbabi M, Wang L. On the analysis of the Zeus botnet crimeware toolkit. In: 8th annual international conference on privacy security and trust (PST). IEEE; 2010. p. 31-8.
5. Bui TN, Zrncic CM. An ant-based algorithm for finding degree-constrained minimum spanning tree. In: Proceedings of the 8th annual conference on genetic and evolutionary computation (GECCO '06). New York, NY, USA: ACM; 2006. p. 11-8.
6. Bui TN, Deng X, Zrncic CM. An improved ant-based algorithm for the degree-constrained minimum spanning. IEEE Transactions on evolutionary Computation 2012;16(2):266-77.
7. Castiglione A, De Prisco R, De Santis A. Do you trust your phone? In: Di Noia T, Buccafurri F, editors. E-commerce and web technologies. Lecture notes in computer science, vol. 5692. Berlin/Heidelberg: Springer; 2009. p. 50-61, http://dx.doi.org/10.1007/978-3-642-03964-5-6.
8. Castiglione A, De Santis A, Fiore U, Palmieri F. An enhanced firewall scheme for dynamic and adaptive containment of emerging security threats. In: 2010 international conference on broadband, wireless computing, communication and applications (BWCCA); 2010. p. 475-81. http://dx.doi.org/10.1109/BWCCA.2010. 117.
9. Castiglione A, De Santis A, Fiore U, Palmieri F. E-mail-based covert channels for asynchronous message steganography. In: 2011 5th international conference on innovative mobile and internet services in ubiquitous computing (IMIS); 2011. p. 503-8. http://dx.doi.org/10.1109/IMIS.2011.133.
10. Castiglione A, De Santis A, Fiore U, Palmieri F. An asynchronous covert channel using spam. Computers and Mathematics with Applications 2012;63 (2):437-47, http://dx.doi.org/10.1016/j.camwa.2011.07.068.
11. Chambers JM, Cleveland W, Kleiner B, Tukey P. Graphical methods for data analysis. Belmont, CA: Wadsworth; 1983.
12. De Santis A, Castiglione A, Fiore U, Palmieri F. An intelligent security architecture for distributed firewalling environments. Journal of Ambient Intelligence and Humanized Computing 2011:1-12, http://dx.doi.org/10.1007/ s12652-011-0069-8.
13. Dorigo, M. and Di Caro, G., Ant colony optimization: a new meta-heuristic, Evolutionary Computation, 1999. CEC 99. Proceedings of the 1999 Congress on, 1999;2(2):p. -1477, http://dx.doi.org/10.1109/CEC.1999.782657.
14. Dove R. Patterns of self-organizing agile security for resilient network situational awareness and sensemaking. In: 2011 8th international conference on information technology: new generations (ITNG); 2011. p. 902-8. http://dx.doi.org/10.1109/ITNG.2011.156.
15. Erdo{combining double acute accent}s P, Rényi A. On the evolution of random graphs. Magyar Tud. Akad. Mat. Kutató Int. Közl 1960;5:17-61.
16. Feily M, Shahrestani A, Ramadass S. A survey of botnet and botnet detection. In: Third international conference on emerging security information, systems and technologies (SECURWARE'09). IEEE; 2009. p. 268-73.
17. Heylighen, Francis, Accelerating Socio-Technological Evolution: from ephemeralization and stigmergy to the global brain, Editors = Modelski, G. and Devezas, T. and Thompson, W.R., Publisher = Taylor \& Francis, isbn =9780203937297, 284-309, 2007.
18. Holz T, Steiner M, Dahl F, Biersack E, Freiling F. Measurements and mitigation of peer-to-peer-based botnets: a case study on storm worm. In: Proceedings of the 1st Usenix workshop on large-scale exploits and emergent threats (LEET'08). Berkeley, CA, USA: USENIX Association; 2008. p. 9:1-9.
19. Hund R, Hamann M, Holz T. Towards next-generation botnets. In: Proceedings of the European conference on computer network defense (EC2ND). Dublin, Ireland: IEEE Computer Society; 11-12 December 2008. p. 33-40.
20. Ianelli N, Hackworth A. Botnets as a vehicle for online crime. CERT Coordination Center; 2005. p. 1-28.
21. Kronenberger J, Medioni J. Food neophobia in wild and laboratory mice (mus musculus domesticus). Behavioural Processes 1985;11(1):53-9.
22. Langner R. Stuxnet: dissecting a cyberwarfare weapon. IEEE Security and Privacy 2011;9(3):49-51.
23. Maymounkov P, Mazières D. Kademlia: a peer-to-peer information system based on the XOR metric. In: Revised papers from the 1st international workshop on peer-to-peer systems (IPTPS '01). London, UK: Springer-Verlag; 2002. p. 53-65.
24. Narula S, Ho C. Degree-constrained minimum spanning tree. Computers and Operations Research 1980;7(4):239-49.
25. Palmieri F, Fiore U. Providing true end-to-end security in converged voice over IP infrastructures. Computers and Security 2009;28(6):433-49, http://dx.doi.org/10.1016/j.cose.2009.01.004.
26. Parunak, HV, Expert assessment of human-human stigmergy, 2005, institution=D-TIC.MIL Document DRDC CR 2005-003.
27. Rieck K, Schwenk G, Limmer T, Holz T, Laskov P. Botzilla: detecting the "phoning home" of malicious software. In: Proceedings of the 2010 ACM symposium on applied computing (SAC). Sierre, Switzerland: ACM; 22-26 March 2010. p. 1978-84.
28. Van Dyke Parunak H. A survey of environments and mechanisms for human-human stigmergy. In: Proceedings of the 2nd international conference on environments for multi-agent systems (E4MAS'05). Springer-Verlag: Berlin, Heidelberg; 2006. p. 163-86.
29. Vogt R, Aycock J, Jacobson Jr MJ. Army of botnets. In: Network and distributed system security. The Internet Society; 2007. p. 1-13.
30. Wang P, Sparks S, Zou CC. An advanced hybrid peer-to-peer botnet. IEEE Transactions on Dependable and Secure Computing 2010;7(2):113-27.
31. Zhang Z, Ho P-H. Janus: a dual-purpose analytical model for understanding, characterizing and countermining multi-stage collusive attacks in enterprise networks. Journal of Network and Computer Applications 2009;32(3):710-20, http://dx.doi.org/10.1016/j.jnca.2008.07.011.