Revealing the Criterion on Botnet Detection Technique
نویسندگان
چکیده
Botnet have already made a big impact that need much attention as one of the most emergent threats to the Internet security. More worst when the peer-to-peer (P2P) botnets take the inspiration and underlying P2P technology to exchange files making botnets much harder to detect and shut down. It make botnets are the biggest threat to internet stability and security. Hence, Botnet detection and prevention has been an interesting research topic to be highlighted. Various types of techniques have been proposed for detection, prevention and mitigation for Botnet attack. Thus, this paper addresses the current trend of Botnet detection techniques and identifies the significant criteria in each technique. Several existing techniques are analyzing from 45 various researches and the capability criteria of Botnet detection techniques have been reviewed. The comparative analysis of these techniques have been shown on the selected detection criteria including; unknown Botnet detection, protocol and structure independent, low false positive, low cost, low risk, encrypted bot detection, real-world detection, not require prior knowledge and reveal bot servers and C&C migration.
منابع مشابه
BotOnus: an online unsupervised method for Botnet detection
Botnets are recognized as one of the most dangerous threats to the Internet infrastructure. They are used for malicious activities such as launching distributed denial of service attacks, sending spam, and leaking personal information. Existing botnet detection methods produce a number of good ideas, but they are far from complete yet, since most of them cannot detect botnets in an early stage ...
متن کاملRevealing the Feature Influence in HTTP Botnet Detection
Botnet are identified as one of most emerging threats due to Cybercriminals work diligently to make most of the part of the users’ network of computers as their target. In conjunction with that, many researchers has conduct a lot of study regarding on the botnets and ways to detect botnet in network traffic. Most of them only used the feature inside the system without mentioning the feature inf...
متن کاملBotRevealer: Behavioral Detection of Botnets based on Botnet Life-cycle
Nowadays, botnets are considered as essential tools for planning serious cyberattacks. Botnets are used to perform various malicious activities such as DDoSattacks and sending spam emails. Different approaches are presented to detectbotnets; however most of them may be ineffective when there are only a fewinfected hosts in monitored network, as they rely on similarity in...
متن کاملA Survey on Botnet Architectures, Detection and Defences
Botnets are known to be one of the most serious Internet security threats. In this survey, we review botnet architectures and their controlling mechanisms. Botnet infection behavior is explained. Then, known botnet models are outlined to study botnet design. Furthermore, Fast-Flux Service Networks (FFSN) are discussed in great details as they play an important role in facilitating botnet traffi...
متن کاملMining Concept-Drifting Data Stream to Detect Peer to Peer Botnet Traffic
We propose a novel stream data classification technique to detect Peer to Peer botnet. Botnet traffic can be considered as stream data having two important properties: infinite length and drifting concept. Thus, stream data classification technique is more appealing to botnet detection than simple classification technique. However, no other botnet detection approaches so far have applied stream...
متن کامل