Abstract
The paper presents a botnet detection approach for the distributed systems. It is based on the developed three level model, which includes botnet’s components: command and control center, control centers, basic elements of the botnet (bots). The novel framework provides the ability to detect known and unknown botnets, and consists of the host and the network levels. At the host level, the detection procedure is based on the implementation of the Bayes classification. The network level extends the results obtained at the host level to the rest of the local area network. Proposed approach provides the exchange of the results obtained by the Bayes classification for further use by other program units of the distributed system. The results of the developed classifier show that representation of the botnets’ samples for different classes and subclasses is sufficient for efficient botnet detection. Proposed technique demonstrates promising results concerning botnet detection in the distributed systems.
Highlights
The trends concerning malware development and its spreading demonstrate an active extending of the malware’s technical capabilities
The detection procedure is based on the implementation of the Bayes classification
The network level extends the results obtained at the host level to the rest of the local area network
Summary
The trends concerning malware development and its spreading demonstrate an active extending of the malware’s technical capabilities. Architecture of the modern antiviruses has a single central control center Such tools as ESET Endpoint Security for Windows Endpoint Security for corporate networks [2], Dr.Web CureNet! Kaspersky Administration Kit Antivirus is based on the principle of autonomous work, and the decision-making is implemented without the administrator participation in case of the critical situations. It is based on a centralized way of organizing the interaction of system components [7]. Mentioned tools are based on methods that do not sufficiently take into account all stages of the botnets functioning and their possible structures, it leads to the decreasing in the botnet detection efficiency. The development of new methods and tools for efficient botnets detection in the distributed systems is an urgent problem
Sign-in/Register to view highlights & summary Sign-in/Register to access full text options 
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Schedule a callDisclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.
