Layered Botnet Detection Framework Based On Signal Processing And Discrete Time Analysis

dc.contributor.authorBani Melhim, Loai Kayed Hassan
dc.date.accessioned2019-08-21T07:37:45Z
dc.date.available2019-08-21T07:37:45Z
dc.date.issued2012-09
dc.description.abstractA massive volume of online financial transactions and sensitive information is exchanged over the Internet. This has shifted the focus of cyber attackers from curiosity to financial gain. Attackers use different malware to achieve their goals. Among the various forms of malware; the botnet is considered as the worst, because of its vast computing power, ability to control many machines and its significant threat to the Internet users. This thesis presents a new approach in the area of botnet detection. It introduces a framework called Layered Botnet Detection Framework (LBDF) that can detect botnet members efficiently. This framework works in the frequency domain rather than in the time domain. LBDF is equipped with a ‘malicious-scanning’ detection algorithm. The LBDF algorithm uses SYN, ACK (SNAK) rules to reduce the volume of network captured traffic and to convert the reduced traffic into discrete time sequences. Then LBDF applies both a periodogram and circular autocorrelation function to these sequences to detect any hidden periodicities. If periodic behavior were detected, the frequency of the sequence and the IP address of the monitored computer will be recorded. Thus the IP address of PCs with periodic behavior will be saved in a database and labeled as suspicious. If any of the suspicious machines performs a malicious-scanning action, it will be declared as a bot. Bots that have similar features are grouped together as members of the same botnet.en_US
dc.identifier.urihttp://hdl.handle.net/123456789/8657
dc.language.isoenen_US
dc.publisherUniversiti Sains Malaysiaen_US
dc.subjectLayered Botnet Detectionen_US
dc.subjectSignal Processingen_US
dc.titleLayered Botnet Detection Framework Based On Signal Processing And Discrete Time Analysisen_US
dc.typeThesisen_US
Files
License bundle
Now showing 1 - 1 of 1
Loading...
Thumbnail Image
Name:
license.txt
Size:
1.71 KB
Format:
Item-specific license agreed upon to submission
Description: