NDLI: Botnet Statistical Analysis Tool for Limited Resource Computer Emergency Response Team

Content Provider	IEEE Xplore Digital Library
Author	Kaemarungsi, K. Yoskamtorn, N. Jirawannakool, K. Sanglerdsinlapachai, N. Luangingkasut, C.
Copyright Year	2009
Abstract	Botnet is recognized as one of the fastest growing threat to the Internet and most users do not aware that they were victimized. ThaiCERT is one of many computer emergency response teams that have limited resources in term of budget to monitor and handle this kind of threat. An interim solution for teams with limited resource is to subscribe to the Shadowserver Foundation’s mailing list instead of deploying their own capturing and monitoring tools. The valuable information from the Shadowserver Foundation in form of plaintext e-mails may be difficult to manage and analyze. However, there is a need to analyze information provided by the Shadowserver Foundation to be able to efficiently handle botnet’s incidents for our own constituency. In this manuscript, we present our approach to handle the botnet threat using available information from the Shadowserver Foundation and describe our automate tool using by our incident handling team. Finally, we present our statistical data on botnet’s threat in our constituency over the last two years.
Starting Page	27
Ending Page	40
File Size	1413629
Page Count	14
File Format	PDF
ISBN	9780769538075
DOI	10.1109/IMF.2009.13
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2009-09-15
Publisher Place	Germany
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Command and control systems Statistical analysis Computerized monitoring Peer to peer computing Internet IP networks Web server Software tools Computer security Information analysis
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

The Dorothy Project: An Open Botnet Analysis Framework for Automatic Tracking and Activity Visualization

An Advanced Hybrid Peer-to-Peer Botnet

Comparative Analysis and Evaluation of Botnet Command and Control Models

Active Botnet Probing to Identify Obscure Command and Control Channels

Propagation Model for Botnet Based on Conficker Monitoring

Botnet: Survey and Case Study

Detecting New Decentralized Botnet Based on Kalman Filter and Multi-chart CUSUM Amplification

Sub-Botnet Coordination Using Tokens in a Switched Network

Behavioural Correlation for Detecting P2P Bots

Botnet Statistical Analysis Tool for Limited Resource Computer Emergency Response Team

Similar Documents

The Dorothy Project: An Open Botnet Analysis Framework for Automatic Tracking and Activity Visualization

An Advanced Hybrid Peer-to-Peer Botnet

Comparative Analysis and Evaluation of Botnet Command and Control Models

Active Botnet Probing to Identify Obscure Command and Control Channels

Propagation Model for Botnet Based on Conficker Monitoring

Botnet: Survey and Case Study

Detecting New Decentralized Botnet Based on Kalman Filter and Multi-chart CUSUM Amplification

Sub-Botnet Coordination Using Tokens in a Switched Network

Behavioural Correlation for Detecting P2P Bots

Botnet Statistical Analysis Tool for Limited Resource Computer Emergency Response Team