A Botnet Detecting Infrastructure Using a Beneficial Botnet
A Botnet Detecting Infrastructure Using a Beneficial Botnet
复制标题
僵尸网络使用有益的僵尸网络检测基础设施
DOI：
10.1145/3235715.3235728
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Yamanoue Takashi
中科院分区：
文献类型：
--
作者：
吉田隆弘;松嶋敏泰;横浜商科大学公開講座委員会 (編集)，柳田義継，永松陽明，浮田善文，高橋篤史，吉田隆弘，金森孝浩，可児滋;Yamanoue Takashi
讨论了一种有益的僵尸网络，试图应对点对点（P2P）网络和域生成算法（DGA）等恶意僵尸网络技术。为了应对此类僵尸网络技术，我们正在使用我们之前的有益机器人来开发有益僵尸网络作为反机器人措施。有益僵尸网络是一组有益机器人。恶意僵尸网络的点对点（P2P）通信很难被单一的入侵检测系统（IDS）检测到。我们的有益僵尸网络能够利用我们有益机器人的协作来检测 P2P 通信。有益的机器人可以检测模仿恶意僵尸网络通信的伪僵尸网络的通信。我们有益的僵尸网络还可以使用 DGA 检测通信。此外，我们的有益僵尸网络有能力应对新僵尸网络的新技术，因为我们的有益僵尸网络具有进化的能力，就像恶意僵尸网络一样。
A beneficial botnet, which tries to cope with technology of malicious botnets such as peer to peer (P2P) networking and Domain Generation Algorithm (DGA), is discussed. In order to cope with such botnets' technology, we are developing a beneficial botnet as an anti-bot measure, using our previous beneficial bot. The beneficial botnet is a group of beneficial bots. The peer to peer (P2P) communication of malicious botnet is hard to detect by a single Intrusion Detection System (IDS). Our beneficial botnet has the ability to detect P2P communication, using collaboration of our beneficial bots. The beneficial bot could detect communication of the pseudo botnet which mimics malicious botnet communication. Our beneficial botnet may also detect communication using DGA. Furthermore, our beneficial botnet has ability to cope with new technology of new botnets, because our beneficial botnet has the ability to evolve, as same as malicious botnets.