Wijesinghe, Udaya

Tupakula, Udaya

Varadharajan, Vijay

2015

<p>The botnet is a group of hijacked computers, which are employed under command and control mechanism administered by a botmaster. Botnet evolved from IRC based centralized botnet to employing common protocols such as HTTP with decentralized architectures and then peer-to-peer designs. As Botnets have become more sophisticated, the need for advanced techniques and research against botnets has grown. In this paper, we propose techniques to detect botnets by analysing network traffic flows. We developed templates for capturing traffic flows with more relevant attributes for botnet detection. Also we make use of the IPFIX standard for the specification of the templates. Hence our techniques can be used to detect different bot families with lesser overheads and are vendor neutral.</p>

Proceedings of the 38th australasian computer science conference (ACSC 2015), p. 101-110

9781921770418

1445-1336

https://hdl.handle.net/1959.11/57195

en

Australian Computer Society Inc

An enhanced model for network flow based botnet detection

Conference Publication

Publication