文章基本信息

标题：Nepenthes Honeypotsbased Botnet Detection
本地全文：下载
作者：Kumar, Sanjeev ; Sehgal, Rakesh ; Singh, Paramdeep 等
期刊名称：Journal of Advances in Information Technology
印刷版ISSN：1798-2340
出版年度：2012
卷号：3
期号：4
页码：215-221
DOI：10.4304/jait.3.4.215-221
语种：English
出版社：Academy Publisher
摘要：The numbers of the botnet attacks are increasing day by day and the detection of botnet spreading in the network has become very challenging. Bots are having specific characteristics in comparison of normal malware as they are controlled by the remote master server and usually don't show their behavior like normal malware until they don't receive any command from their master server. Most of time bot malware are inactive, hence it is very difficult to detect. Further the detection or tracking of the network of theses bots requires an infrastructure that should be able to collect the data from a diverse range of data sources and correlate the data to bring the bigger picture in view.In this paper, we are sharing our experience of botnet detection in the private network as well as in public zone by deploying the nepenthes honeypots. The automated framework for malware collection using nepenthes and analysis using anti-virus scan are discussed. The experimental results of botnet detection by enabling nepenthes honeypots in network are shown. Also we saw that existing known bots in our network can be detected.
关键词：Malware;Bots;Network Security;Nepenthes;Honeypots;Privacy