NDLI: Role of handshaking packets in improving peer to peer BotNet detection

Content Provider	IEEE Xplore Digital Library
Author	Ritu Kaushal, Rishabh
Copyright Year	2015
Description	Author affiliation: Department of Information Technology, Indira Gandhi Delhi Technical University for Women, New Delhi, India (Ritu; Kaushal, Rishabh)
Abstract	BotNet is a network based attack that has emerged as a serious threat to Internet community and has been a common weapon for committing cybercrimes such as spam generation, stealing sensitive information, click fraud and DDOS attacks. Botnet is a network of hosts remotely controlled and coordinated under a common command and control infrastructure. P2P BotNets represent a recent and most challenging class of BotNets currently available which are hard to detect due to their decentralized architecture. A P2P botnet detection technique based on network behavior analysis has been proposed in this work. We have aggregated features from the most popular prior works based on network behavior analysis and augmented them with a new set of features which are particularly emphasizing on control packets. We study the behavior of these control packets particularly the handshaking signals exchanged in botnet traffic with respect to normal traffic. Results and analysis clearly show that proposed control packets based features play a major role in botnet detection. Further, to decide how many handshaking packets are to be considered, we perform correlation analysis and results for the same are also mentioned.
Starting Page	597
Ending Page	601
File Size	398754
Page Count	5
File Format	PDF
e-ISBN	9781467373098
DOI	10.1109/CoCoNet.2015.7411249
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-12-16
Publisher Place	India
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Protocols Correlation Botnet Detection Ports (Computers) Computer architecture Network Security Feature extraction Data Mining IP networks Servers
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Towards effective feature selection in machine learning-based botnet detection approaches

Survey on botnet: Its architecture, detection, prevention and mitigation

Insider attack detection using weak indicators over network flow data

Unknown malware detection using network traffic classification

An analysis of network traffic classification for botnet detection

PeerSorter: Classifying Generic P2P Traffic in Real-Time

Collaboration-based Botnet Detection Architecture

A survey on Botnet: Classification, detection and defense

Botnet detection using software defined networking

Role of handshaking packets in improving peer to peer BotNet detection

Similar Documents

Towards effective feature selection in machine learning-based botnet detection approaches

Survey on botnet: Its architecture, detection, prevention and mitigation

Insider attack detection using weak indicators over network flow data

Unknown malware detection using network traffic classification

An analysis of network traffic classification for botnet detection

PeerSorter: Classifying Generic P2P Traffic in Real-Time

Collaboration-based Botnet Detection Architecture

A survey on Botnet: Classification, detection and defense

Botnet detection using software defined networking

Role of handshaking packets in improving peer to peer BotNet detection