Botnet and Detection Techniques: A Review

Abstract

Abstract-Among the diverse forms of mal w are, Botnet is the most w idespread and serious threat which occurs commonly in today's cyberattacks. A botnet is a group of compromised computers whi ch are remotely controlled by attacker to launch various network attacks, such as DDoS attack, spam, click fraud, identity theft and information phishing. Botnet has become a popular and productive tool behind many cyberattacks. The defining characteristic of botnets i s the use of command and control channels through which they can be updated and di rected. Recently malicious botnets evol ve into HTTP botnets out of typi cal IRC botnets. Data mining algorithms allow us to automate d etecting characteristics from large amount of data, which the conventional heuri stics and signature based methods could not apply.