A revised ant colony optimization scheme for discovering attack paths of botnet

Ping Wang, Hui-Tang Lin, Tzy Shiah Wang

Research output: Chapter in Book/Report/Conference proceedingConference contribution

5 Citations (Scopus)

Abstract

IP traceback technique is an effective method to find either the attack origin or command-and-control (C&C) server on the Internet. The traditional ACO (ant colony optimization) constantly converged to a local minimum solution easily such that the global most portable of the final solution might be missed. Accordingly, the present study proposes a modified ACS (ant colony system) scheme designated as ACS-IPTBK to solve the IP traceback problem, predict both the most probable attack path and the computational resources needed in botnets. The ability of the ants to search all feasible attack paths is enhanced by means of a global heuristics. A series of ns2 simulations are performed to investigate the minimum resources required to successfully reconstruct the attack path. The convergence time for attack paths of different routing distances were investigated using a random graph generator based on Waxman's scheme. Overall, the results confirm that the proposed method provides an effective means of reconstructing the path between the attacker and the victim based on the incomplete routing information from the related ISPs.

Original languageEnglish
Title of host publicationProceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011
Pages918-923
Number of pages6
DOIs
Publication statusPublished - 2011 Dec 1
Event2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011 - Tainan, Taiwan
Duration: 2011 Dec 72011 Dec 9

Publication series

NameProceedings of the International Conference on Parallel and Distributed Systems - ICPADS
ISSN (Print)1521-9097

Other

Other2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011
CountryTaiwan
CityTainan
Period11-12-0711-12-09

Fingerprint

Ant colony optimization
Servers
Internet
Botnet

All Science Journal Classification (ASJC) codes

  • Hardware and Architecture

Cite this

Wang, P., Lin, H-T., & Wang, T. S. (2011). A revised ant colony optimization scheme for discovering attack paths of botnet. In Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011 (pp. 918-923). [6121380] (Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS). https://doi.org/10.1109/ICPADS.2011.11
Wang, Ping ; Lin, Hui-Tang ; Wang, Tzy Shiah. / A revised ant colony optimization scheme for discovering attack paths of botnet. Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011. 2011. pp. 918-923 (Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS).
@inproceedings{424578f072ec4b048174554e0206c87c,
title = "A revised ant colony optimization scheme for discovering attack paths of botnet",
abstract = "IP traceback technique is an effective method to find either the attack origin or command-and-control (C&C) server on the Internet. The traditional ACO (ant colony optimization) constantly converged to a local minimum solution easily such that the global most portable of the final solution might be missed. Accordingly, the present study proposes a modified ACS (ant colony system) scheme designated as ACS-IPTBK to solve the IP traceback problem, predict both the most probable attack path and the computational resources needed in botnets. The ability of the ants to search all feasible attack paths is enhanced by means of a global heuristics. A series of ns2 simulations are performed to investigate the minimum resources required to successfully reconstruct the attack path. The convergence time for attack paths of different routing distances were investigated using a random graph generator based on Waxman's scheme. Overall, the results confirm that the proposed method provides an effective means of reconstructing the path between the attacker and the victim based on the incomplete routing information from the related ISPs.",
author = "Ping Wang and Hui-Tang Lin and Wang, {Tzy Shiah}",
year = "2011",
month = "12",
day = "1",
doi = "10.1109/ICPADS.2011.11",
language = "English",
isbn = "9780769545769",
series = "Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS",
pages = "918--923",
booktitle = "Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011",

}

Wang, P, Lin, H-T & Wang, TS 2011, A revised ant colony optimization scheme for discovering attack paths of botnet. in Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011., 6121380, Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS, pp. 918-923, 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011, Tainan, Taiwan, 11-12-07. https://doi.org/10.1109/ICPADS.2011.11

A revised ant colony optimization scheme for discovering attack paths of botnet. / Wang, Ping; Lin, Hui-Tang; Wang, Tzy Shiah.

Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011. 2011. p. 918-923 6121380 (Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

TY - GEN

T1 - A revised ant colony optimization scheme for discovering attack paths of botnet

AU - Wang, Ping

AU - Lin, Hui-Tang

AU - Wang, Tzy Shiah

PY - 2011/12/1

Y1 - 2011/12/1

N2 - IP traceback technique is an effective method to find either the attack origin or command-and-control (C&C) server on the Internet. The traditional ACO (ant colony optimization) constantly converged to a local minimum solution easily such that the global most portable of the final solution might be missed. Accordingly, the present study proposes a modified ACS (ant colony system) scheme designated as ACS-IPTBK to solve the IP traceback problem, predict both the most probable attack path and the computational resources needed in botnets. The ability of the ants to search all feasible attack paths is enhanced by means of a global heuristics. A series of ns2 simulations are performed to investigate the minimum resources required to successfully reconstruct the attack path. The convergence time for attack paths of different routing distances were investigated using a random graph generator based on Waxman's scheme. Overall, the results confirm that the proposed method provides an effective means of reconstructing the path between the attacker and the victim based on the incomplete routing information from the related ISPs.

AB - IP traceback technique is an effective method to find either the attack origin or command-and-control (C&C) server on the Internet. The traditional ACO (ant colony optimization) constantly converged to a local minimum solution easily such that the global most portable of the final solution might be missed. Accordingly, the present study proposes a modified ACS (ant colony system) scheme designated as ACS-IPTBK to solve the IP traceback problem, predict both the most probable attack path and the computational resources needed in botnets. The ability of the ants to search all feasible attack paths is enhanced by means of a global heuristics. A series of ns2 simulations are performed to investigate the minimum resources required to successfully reconstruct the attack path. The convergence time for attack paths of different routing distances were investigated using a random graph generator based on Waxman's scheme. Overall, the results confirm that the proposed method provides an effective means of reconstructing the path between the attacker and the victim based on the incomplete routing information from the related ISPs.

UR - http://www.scopus.com/inward/record.url?scp=84863017231&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84863017231&partnerID=8YFLogxK

U2 - 10.1109/ICPADS.2011.11

DO - 10.1109/ICPADS.2011.11

M3 - Conference contribution

SN - 9780769545769

T3 - Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS

SP - 918

EP - 923

BT - Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011

ER -

Wang P, Lin H-T, Wang TS. A revised ant colony optimization scheme for discovering attack paths of botnet. In Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011. 2011. p. 918-923. 6121380. (Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS). https://doi.org/10.1109/ICPADS.2011.11