DETECTION OF STEALTHY P2P BOT COMPROMISED HOSTS IN A NETWORK

Apply

DETECTION OF STEALTHY P2P BOT COMPROMISED HOSTS IN A NETWORK

Journal Title: International Journal of Engineering Sciences & Research Technology - Year 30, Vol 5, Issue 6

Abstract

Peer-to-peer (P2P) botnets have recently been adopted by botmasters for their resiliency against take-down efforts. Besides being harder to take down, modern botnets tend to be stealthier in the way they perform malicious activities, making current detection approaches ineffective. In addition, the rapidly growing volume of network traffic calls for high scalability of detection systems. In this paper, we propose a novel scalable botnet detection system capable of detecting stealthy P2P botnets. Our system first identifies all hosts that are likely engaged in P2P communications. It then derives statistical fingerprints to profile P2P traffic and further distinguish between P2P botnet traffic and legitimate P2P traffic. The parallelized computation with bounded complexity makes scalability a built-infeature of our system. Extensive evaluation has demonstrated both high detection accuracy and great scalability of the proposed system.

Authors and Affiliations

Raveesha H H

Keywords

P2P traffic botnet stealthy legitimate bot compromised host . P2P traffic botnet stealthy legitimate bot compromised host .

EP ID EP123176
DOI 10.5281/zenodo.56028
Views 96
Downloads 0