A revised ant colony optimization scheme for discovering attack paths of botnet

Ping Wang, Hui Tang Lin, Tzy Shiah Wang

研究成果: Conference contribution

5 引文 (Scopus)

摘要

IP traceback technique is an effective method to find either the attack origin or command-and-control (C&C) server on the Internet. The traditional ACO (ant colony optimization) constantly converged to a local minimum solution easily such that the global most portable of the final solution might be missed. Accordingly, the present study proposes a modified ACS (ant colony system) scheme designated as ACS-IPTBK to solve the IP traceback problem, predict both the most probable attack path and the computational resources needed in botnets. The ability of the ants to search all feasible attack paths is enhanced by means of a global heuristics. A series of ns2 simulations are performed to investigate the minimum resources required to successfully reconstruct the attack path. The convergence time for attack paths of different routing distances were investigated using a random graph generator based on Waxman's scheme. Overall, the results confirm that the proposed method provides an effective means of reconstructing the path between the attacker and the victim based on the incomplete routing information from the related ISPs.

原文English
主出版物標題Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011
頁面918-923
頁數6
DOIs
出版狀態Published - 2011 十二月 1
事件2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011 - Tainan, Taiwan
持續時間: 2011 十二月 72011 十二月 9

出版系列

名字Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS
ISSN(列印)1521-9097

Other

Other2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011
國家Taiwan
城市Tainan
期間11-12-0711-12-09

指紋

Ant colony optimization
Servers
Internet
Botnet

All Science Journal Classification (ASJC) codes

  • Hardware and Architecture

引用此文

Wang, P., Lin, H. T., & Wang, T. S. (2011). A revised ant colony optimization scheme for discovering attack paths of botnet. 於 Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011 (頁 918-923). [6121380] (Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS). https://doi.org/10.1109/ICPADS.2011.11
Wang, Ping ; Lin, Hui Tang ; Wang, Tzy Shiah. / A revised ant colony optimization scheme for discovering attack paths of botnet. Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011. 2011. 頁 918-923 (Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS).
@inproceedings{424578f072ec4b048174554e0206c87c,
title = "A revised ant colony optimization scheme for discovering attack paths of botnet",
abstract = "IP traceback technique is an effective method to find either the attack origin or command-and-control (C&C) server on the Internet. The traditional ACO (ant colony optimization) constantly converged to a local minimum solution easily such that the global most portable of the final solution might be missed. Accordingly, the present study proposes a modified ACS (ant colony system) scheme designated as ACS-IPTBK to solve the IP traceback problem, predict both the most probable attack path and the computational resources needed in botnets. The ability of the ants to search all feasible attack paths is enhanced by means of a global heuristics. A series of ns2 simulations are performed to investigate the minimum resources required to successfully reconstruct the attack path. The convergence time for attack paths of different routing distances were investigated using a random graph generator based on Waxman's scheme. Overall, the results confirm that the proposed method provides an effective means of reconstructing the path between the attacker and the victim based on the incomplete routing information from the related ISPs.",
author = "Ping Wang and Lin, {Hui Tang} and Wang, {Tzy Shiah}",
year = "2011",
month = "12",
day = "1",
doi = "10.1109/ICPADS.2011.11",
language = "English",
isbn = "9780769545769",
series = "Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS",
pages = "918--923",
booktitle = "Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011",

}

Wang, P, Lin, HT & Wang, TS 2011, A revised ant colony optimization scheme for discovering attack paths of botnet. 於 Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011., 6121380, Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS, 頁 918-923, 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011, Tainan, Taiwan, 11-12-07. https://doi.org/10.1109/ICPADS.2011.11

A revised ant colony optimization scheme for discovering attack paths of botnet. / Wang, Ping; Lin, Hui Tang; Wang, Tzy Shiah.

Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011. 2011. p. 918-923 6121380 (Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS).

研究成果: Conference contribution

TY - GEN

T1 - A revised ant colony optimization scheme for discovering attack paths of botnet

AU - Wang, Ping

AU - Lin, Hui Tang

AU - Wang, Tzy Shiah

PY - 2011/12/1

Y1 - 2011/12/1

N2 - IP traceback technique is an effective method to find either the attack origin or command-and-control (C&C) server on the Internet. The traditional ACO (ant colony optimization) constantly converged to a local minimum solution easily such that the global most portable of the final solution might be missed. Accordingly, the present study proposes a modified ACS (ant colony system) scheme designated as ACS-IPTBK to solve the IP traceback problem, predict both the most probable attack path and the computational resources needed in botnets. The ability of the ants to search all feasible attack paths is enhanced by means of a global heuristics. A series of ns2 simulations are performed to investigate the minimum resources required to successfully reconstruct the attack path. The convergence time for attack paths of different routing distances were investigated using a random graph generator based on Waxman's scheme. Overall, the results confirm that the proposed method provides an effective means of reconstructing the path between the attacker and the victim based on the incomplete routing information from the related ISPs.

AB - IP traceback technique is an effective method to find either the attack origin or command-and-control (C&C) server on the Internet. The traditional ACO (ant colony optimization) constantly converged to a local minimum solution easily such that the global most portable of the final solution might be missed. Accordingly, the present study proposes a modified ACS (ant colony system) scheme designated as ACS-IPTBK to solve the IP traceback problem, predict both the most probable attack path and the computational resources needed in botnets. The ability of the ants to search all feasible attack paths is enhanced by means of a global heuristics. A series of ns2 simulations are performed to investigate the minimum resources required to successfully reconstruct the attack path. The convergence time for attack paths of different routing distances were investigated using a random graph generator based on Waxman's scheme. Overall, the results confirm that the proposed method provides an effective means of reconstructing the path between the attacker and the victim based on the incomplete routing information from the related ISPs.

UR - http://www.scopus.com/inward/record.url?scp=84863017231&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84863017231&partnerID=8YFLogxK

U2 - 10.1109/ICPADS.2011.11

DO - 10.1109/ICPADS.2011.11

M3 - Conference contribution

AN - SCOPUS:84863017231

SN - 9780769545769

T3 - Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS

SP - 918

EP - 923

BT - Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011

ER -

Wang P, Lin HT, Wang TS. A revised ant colony optimization scheme for discovering attack paths of botnet. 於 Proceedings - 2011 17th IEEE International Conference on Parallel and Distributed Systems, ICPADS 2011. 2011. p. 918-923. 6121380. (Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS). https://doi.org/10.1109/ICPADS.2011.11