An algorithm for anomaly-based botnet detection

2nd Workshop on Steps to Reducing Unwanted Traffic on the Internet, SRUTI 2006

Volumn , Issue , 2006, Pages 43-48

  Binkley, James R ^a   Singh, Suresh ^a  

^a Portland State University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MESH GENERATION; TRANSMISSION CONTROL PROTOCOL;

BOTNET DETECTIONS; BOTNETS; IN-CHANNELS; IP CHANNELS;

BOTNET;

EID: 85080378133     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (10)

1. M. Bailey, E. Cooke, F. Jahanian, J. Nazario, and D. Watson, The Internet Motion Sensor: A Distributed Blackhole Monitoring System. In Proceedings of the Network and Distributed Security Symposium, San Diego, CA, January 2005.
2. P. Barford, V. Yegneswaran, An Inside Look at Botnets, Special Workshop on Malware Detection, Advances in Information Security, Springer Verlag, 2006
3. J. Binkley, B. Massey, Ourmon and Network Monitoring Performance. Proceedings of the Spring 2005 USENIX Conference, Freenix track, Anaheim, April 2005.
4. CERT Advisory CIAD-2004-10 Multiple Vulnerabilities in Microsoft Products http://www.cert.org/advisories/ciad-2004-10.htm, April 2004.
5. E. Cooke, F. Jahanian, and D. McPherson, The zombie roundup: Understanding, detecting and disrupting botnets. In Proceedings of Usenix Workshop on Stepts to Reducing Unwanted Traffic on the Internet (SRUTI'05), Cambridge, MA, July 2005.
6. The Honeynet Project and Research Alliance. Know Your Enemy, Tracking Botnets. http://honeynet.org/papers/bots, March 2005.
7. J. Oikarinen, D. Reed. Internet Relay Chat Protocol. IETF RFC 1459, May 1993.
8. Snort IDS web page. http://www.snort.org, March 2006.
9. Sourceforge Ourmon web page. http://ourmon.sourceforge.net, December 2005.
10. Wikipedia web page. http://en.wikipedia.org/wiki/ Internet_Relay_Chat, December 2005.