The Impact of the Observation Period for Detecting P2P Botnets on the Real Traffic Using BotCluster

Chun Yu Wang, Jia Hong Yap, Kuan Chung Chen, Jyh Biau Chang, Ce Kuen Shieh

研究成果: Conference contribution

摘要

In recent years, many studies on peer-to-peer (P2P) botnet detection have exhibited the excellent detection precision on synthetic logs collected from the testbed. However, most of them do not evaluate their effectiveness on real traffic. In this paper, we use our BotCluster to analyze real traffic from April 2nd to April 15th, 2017, collected as Netflow format, with three time-scopes for detecting P2P botnet activities in two campuses (National Cheng Kung University (NCKU) and National Chung Cheng University (CCU)). Three time-scopes including single-day, three-day, and weekly observation period applied to the same traffic logs for revealing the influence of the observation period on P2P botnet detection. The experiments show that with the weekly observation period, the precision can increase 10% from 84% to 94% on the combined traffic logs of two campuses.

原文English
主出版物標題New Trends in Computer Technologies and Applications - 23rd International Computer Symposium, ICS 2018, Revised Selected Papers
編輯Chuan-Yu Chang, Chien-Chou Lin, Horng-Horng Lin
發行者Springer Verlag
頁面82-92
頁數11
ISBN(列印)9789811391897
DOIs
出版狀態Published - 2019
事件23rd International Computer Symposium, ICS 2018 - Yunlin, Taiwan
持續時間: 2018 12月 202018 12月 22

出版系列

名字Communications in Computer and Information Science
1013
ISSN(列印)1865-0929
ISSN(電子)1865-0937

Conference

Conference23rd International Computer Symposium, ICS 2018
國家/地區Taiwan
城市Yunlin
期間18-12-2018-12-22

All Science Journal Classification (ASJC) codes

  • 電腦科學(全部)
  • 數學(全部)

指紋

深入研究「The Impact of the Observation Period for Detecting P2P Botnets on the Real Traffic Using BotCluster」主題。共同形成了獨特的指紋。

引用此