P2P Botnet Detection Using Min-Vertex Cover

Abstract

P2P botnet is one of the most critical threats to the current Internet security. In this paper, we propose a session-based analysis and minimum vertex cover mining detecting model for core nodes of P2P botnets. This model is focused on solving the core nodes of botnet and has a good performance when the characteristics of botnet are changed to avoid detecting. The simulation experiments reveal that when the session detection rate is at 50% and session falsepositive rate is at 29%, the core node detection rate still remains 98.9%, and the false-positive rate of core node is only 4.87%.