The Design for Detecting and Monitoring P2P Botnet

Abstract

Abstract. Through the research on the life cycle of P2P botnet host, integrated with offline and online modes, this paper proposes a new technique to analyse the captured export network flow, and to detect and monitor the P2P botnet hosts which are on initial stage, trance stage and attack stage, then make the identified P2P botnet hosts live in isolation. The solution can implement the detection of P2P botnet hosts more efficiently and precisely, and reduce the harm of the botnet.