arrow
返回

Botnet Communication Patterns

delete2017-01-01
delete102
PRE
AI
G
Gernot Vormayr *
T
Tanja Zseby
J
Joachim Fabini
DOI:10.1109/COMST.2017.2749442delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Malicious botnets have become a common threat and pervade large parts of the Internet today. Existing surveys and taxonomies focus on botnet topologies, command and control protocols, and botnet objectives. Building on these research results, network-based detection techniques have been proposed that are capable of detecting known botnets. Methods for botnet establishment and operation have evolved significantly over the past decade resulting in the need for detection methods that are capable of detecting new, previously unknown types of botnets. In this paper we present an in-depth analysis of all network communication aspects in botnet establishment and operation. We examine botnet topology, protocols, and analyze a large set of very different and highly sophisticated existing botnets from a network communication perspective. Based on our analysis, we introduce a novel taxonomy of generalized communication patterns for botnet communication using standardized unified modeling language sequence diagrams. We furthermore examine data exchange options and investigate the influence of encryption and hiding techniques. Our generalized communication patterns provide a useful basis for the development of sophisticated network-based botnet detection mechanisms and can offer a key component for building protocol-and topology-independent network-based detectors.
Keyword:
Bot
botnet
C&C
botnet detection
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

I
IEEE Communications Surveys and Tutorials
IF:
46.7
论文数:
1.5K
被引数:
3.3W

机构

T
Technische Universitat Wien
学者数:
1.3W
论文数: 1.1W
被引数: 21
引用论文

引用论文

Iridium(I), Iridium(III), and Iridium(V) Complexes Containing the (2-Methoxyethyl)cyclopentadienyl Ligand
err2006-09-15
err0
PREAI
errMiguel A. Esteruelas; Francisco J. Fernández-Alvarez; Ana M. López; Enrique Oñate; Pilar Ruiz-Sánchez
err分享
err收藏
err分享
err收藏
err分享
err收藏
学者 查看更多内容