Botnet Detection in Low Latency Anonymous Communication Network: A Branch of Knowledge

Abstract

BotMaster have recently targeted their attention to low latency anonymous communication i.e. The Onion Router (Tor) to provide mysterious communication to command and control infrastructure. Here command and control infrastructure plays an important role to perform malicious activity such as capturing credential activity, steal user's personal information etc. In order to decrease detection ability of command and control (C&C) server, BotMaster have decided to keep botnet with centralized communication topology along with Tor network. Tor network creates encrypted virtual circuit to publish network services without revealing identity of source and destination. It uses Security framework to perform cyber attacks by the BotMaster. In most of the cases BotMaster is identified by using networking traffic monitoring and port scanning techniques. Therefore, it is necessary to detect the Botnet which is operated through Tor network to provide secure network service to internet users. Thus, Tor network has to be secured from the anonymous users. This work proposes the functionality of Botnet, Botnet detection techniques, Low latency anonymous communication network such as Tor network, and Botnet based on Tor Network.