Botnet Research Survey

Zhu, Zhixue; Lu, Guohan; Chen, Yan; Fu, Zhi; Roberts, Patricia; Han, Kun-Hee

doi:10.1109/compsac.2008.205

Cited by 120 publications

(50 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Stressing the application code can reveal hidden functionality which can contain specific conditions that need to be met for malicious code to be executed. In addition, an application may have defenses [22] in place by making an attempt to detect its execution environment and consequently altering its behavior [14]. Countermeasures [15] also exist for when a program attempts to detect its execution environment.…”

Section: Introductionmentioning

confidence: 99%

Forced-Path Execution for Android Applications on x86 Platforms

Johnson

Stavrou

2013

2013 IEEE Seventh International Conference on Software Security and Reliability Companion

View full text Add to dashboard Cite

Abstract-We present a code analysis framework that performs scalable forced-path execution of Android applications in commodity hardware. Our goal is to reveal the full application functional behavior for large commercial applications without access to source code. We do so by identifying code blocks and API calls that are deemed sensitive and provide a security report to an analyst regarding the functionality of the Android application that is under inspection.We show that our approach is scalable by allowing for the execution of each software component by numerous instances of execution modules. Each execution instance exercises a different code path through the application call-graph leading to full code and state space coverage and exposing any hidden or unwanted functionality. The output is a list of API calls, parameter values, component call graphs, and control flow graphs. We show how this can be leveraged for automated policy enforcement of runtime functionality.

show abstract

Section: Introductionmentioning

confidence: 99%

Forced-Path Execution for Android Applications on x86 Platforms

Johnson

Stavrou

2013

2013 IEEE Seventh International Conference on Software Security and Reliability Companion

View full text Add to dashboard Cite

show abstract

“…IDS researchers assess the payload-based IDSs processing capability to lie between 100 Mbps and 200 Mbps when commodity hardware is used, and close to 1 Gbps when dedicated hardware is employed (Feily et al, 2009;Zhu et al, 2008). Famous tools like Snort and Bro consume high resource when they deal with huge amount of payload data of in today high speed networks.…”

Section: Analysis Based On Flow Datamentioning

confidence: 99%

BotNet Detection: Enhancing Analysis by Using Data Mining Techniques

Alparslan¹,

Karahoca²,

Karahoca³

2012

Advances in Data Mining Knowledge Discovery and Applications

View full text Add to dashboard Cite

“…There are two main approaches for botnet defense, the first one is analyzing the network traffic the second approach is using honeypots (Zhaosheng et al, 2008).…”

Section: P2p Botnet Detectionmentioning

confidence: 99%

A Review of Peer-to-Peer Botnet Detection Techniques

Elhalabi¹,

Manickam²,

Melhim³

et al. 2014

Journal of Computer Science

View full text Add to dashboard Cite

In recent years, Peer-to-Peer technology has an extensive use. Botnets have exploited this technology efficiently and introduced the P2P botnet, which uses P2P network for remote control of its bots and become one of the most significant threats to computer networks. They are used to make DDOS attacks, generate spam, click fraud and steal sensitive information. Compared with traditional botnets, P2P botnets are harder to be defended and hijacked. In this study we discuss various P2P botnet detection approaches and evaluate their effectiveness. We identify the advantages and shortcomings of each of the discussed techniques. This can guide the researchers to a better understanding of P2P botnets and easier for them developing more sufficient detection techniques. Our evaluation shows that each technique has its own advantages and limitations. Two or more detection techniques might be used together, in order to have a robust P2P botent detection.

show abstract

Botnet Research Survey

Cited by 120 publications

References 3 publications

Forced-Path Execution for Android Applications on x86 Platforms

Forced-Path Execution for Android Applications on x86 Platforms

BotNet Detection: Enhancing Analysis by Using Data Mining Techniques

A Review of Peer-to-Peer Botnet Detection Techniques

Contact Info

Product

Resources

About