Abstract
Today different types of malware exist in the Internet. Among them one of the
malware is known as botnet which is frequently used for many cyber attacks and crimes in
the Internet. Currently botnets are the main rootcause for several illegal activities like
spamming, DDoS, click fraud etc. Botnets operate under the command and control(C&C)
infrastructure which makes its functioning unique. As long as the Internet exists botnet also
will exist. It can be used to perpetrate many Internet crimes. So fighting against them is a
challenging problem. The P2P-decentralized based botnets are more dangerous than
centralized botnets. In this paper a novel approach for the detection of P2P based botnet is
presented. The proposed approach for the detection of botnet in the network stream
analysis has been done in three phases. The first phase begins with the identification of P2P
node and the second phase deals with the clustering of the suspicious P2P node. Finally
botnet detection procedure has been applied which is based on stability of bots.
Experimental results show that the proposed approach detects more number of bots with
high accuracy.
Users
Please
log in to take part in the discussion (add own reviews or comments).