Building a Scalable System for Stealthy P2P-Botnet Detection
Document Type
Article
Publication Date
1-1-2014
Abstract
Peer-to-peer (P2P) botnets have recently been adopted by botmasters for their resiliency against take-down efforts. Besides being harder to take down, modern botnets tend to be stealthier in the way they perform malicious activities, making current detection approaches ineffective. In addition, the rapidly growing volume of network traffic calls for high scalability of detection systems. In this paper, we propose a novel scalable botnet detection system capable of detecting stealthy P2P botnets. Our system first identifies all hosts that are likely engaged in P2P communications. It then derives statistical fingerprints to profile P2P traffic and further distinguish between P2P botnet traffic and legitimate P2P traffic. The parallelized computation with bounded complexity makes scalability a built-in feature of our system. Extensive evaluation has demonstrated both high detection accuracy and great scalability of the proposed system. © 2005-2012 IEEE.
Repository Citation
Zhang, J.,
Perdisci, R.,
Lee, W.,
Luo, X.,
& Sarfraz, U.
(2014). Building a Scalable System for Stealthy P2P-Botnet Detection. IEEE Transactions on Information Forensics and Security, 9 (1), 27-38.
https://corescholar.libraries.wright.edu/cse/542
DOI
10.1109/TIFS.2013.2290197
