Application Entropy Theory to Detect New Peer-to-Peer Botnet with Multi-chart CUSUM

Authors:
Jian Kang;Jun-Yao Zhang
Affiliations:
-;-
Venue:
ISECS '09 Proceedings of the 2009 Second International Symposium on Electronic Commerce and Security - Volume 01
Year:
2009

Citing 0
Cited 4

A scalable, efficient and informative approach for anomaly-based intrusion detection systems: theory and practice

International Journal of Network Management
Detecting anomalies in backbone network traffic: a performance comparison among several change detection methods

International Journal of Sensor Networks
Simulation-based study of botnets and defense mechanisms against them

Journal of Computer and Systems Sciences International
Botnets: A survey

Computer Networks: The International Journal of Computer and Telecommunications Networking

Quantified Score

Hi-index	0.00

Visualization

Abstract

Botnets have been recognized as one of the most important threats to the security of the Internet. They engage in Distributed Denial of Service (DDOS) attacks, email spamming and other malicious activities likewise. As evolving new features such as decentralized architecture, using P2P networks and etc, new Peer-to-Peer(P2P) botnets could no longer be indicated effectively and accurately by using the traditional detection methods. And we believe that adopting more sophisticated methods from being detected would be the very trend of future botnet development. Thus, in this paper, based on several of the new P2P botnet characteristic properties, we propose a novel detecting method applying the Information Entropy theory in the detection Multi-chart CUSUM. With verification of experiments, it successfully detects the botnet with a relatively high precision.