A Two-Phase Multi-Class Botnet Labeling Approach for Real-World Traffic

Ta Chun Lo, Shan Hong Yang, Jyh Biau Chang, Chung Ho Chen, Ce Kuen Shieh

研究成果: Conference contribution

摘要

Within the realm of cybersecurity, botnets represent an increasingly formidable threat, characterized by diverse types exhibiting distinct behavioral patterns and characteristics. This study addresses the imperative need for real-time botnet activity detection by introducing a multi-class labeling system tailored for real-world network traffic. Employing clustering algorithms and a semi-supervised learning framework, this system efficiently labels benign traffic and performs multi-class labeling for various botnet traffic categories. Hierarchical Density-based Spatial Clustering of Applications with Noise (HDBSCAN) is harnessed for clustering both synthetic and real-world datasets, significantly enhancing labeling coverage. The remaining traffic is designated as 'unknown' and subjected to identification through a semi-supervised learning approach. A comparative analysis underscores the superiority of HDBSCAN over Density-based Spatial Clustering of Applications with Noise (DBSCAN), successfully clustering an additional 11% of data. Remarkably, our system exhibits substantial advancements in data labeling when juxtaposed with prior research efforts. This research introduces an effective solution for botnet labeling in the context of network security, thereby enhancing the capacity for detecting and mitigating malicious botnet activities.

原文English
主出版物標題6th International Conference on Artificial Intelligence in Information and Communication, ICAIIC 2024
發行者Institute of Electrical and Electronics Engineers Inc.
頁面685-690
頁數6
ISBN(電子)9798350344349
DOIs
出版狀態Published - 2024
事件6th International Conference on Artificial Intelligence in Information and Communication, ICAIIC 2024 - Osaka, Japan
持續時間: 2024 2月 192024 2月 22

出版系列

名字6th International Conference on Artificial Intelligence in Information and Communication, ICAIIC 2024

Conference

Conference6th International Conference on Artificial Intelligence in Information and Communication, ICAIIC 2024
國家/地區Japan
城市Osaka
期間24-02-1924-02-22

All Science Journal Classification (ASJC) codes

  • 人工智慧
  • 電腦網路與通信
  • 電腦科學應用
  • 電腦視覺和模式識別
  • 資訊系統
  • 安全、風險、可靠性和品質
  • 健康資訊學

指紋

深入研究「A Two-Phase Multi-Class Botnet Labeling Approach for Real-World Traffic」主題。共同形成了獨特的指紋。

引用此