Title :
VMM-Based Framework for P2P Botnets Tracking and Detection
Author_Institution :
Dept. of Comput. Sci., South Central Univ. for Nat., Wuhan, China
Abstract :
Botnets detection is a relatively new and a very challenging research area. In this paper, we presented VMMBotsViewer, a VMM based botnet detection system that explores the network traffic behavior and system level botnets command and control event. Our experimental evaluation of VMMBotsViewer on many real-world network showed that it has very promising detection accuracy with very low false positive rate.
Keywords :
invasive software; peer-to-peer computing; telecommunication security; telecommunication traffic; virtual machines; P2P botnet detection; P2P botnet tracking; VMM-based framework; VMMBotsViewer; network traffic behavior; system level botnet command-control event; Command and control systems; Computer networks; Computer science; Event detection; Information technology; Monitoring; Operating systems; Peer to peer computing; Protocols; Telecommunication traffic; Botnets; VMM; detection;
Conference_Titel :
Information Technology and Computer Science, 2009. ITCS 2009. International Conference on
Conference_Location :
Kiev
Print_ISBN :
978-0-7695-3688-0
DOI :
10.1109/ITCS.2009.301
