Detecting domain‐flux botnet based on DNS traffic features in managed network

DT Truong, G Cheng - Security and Communication Networks, 2016 - Wiley Online Library
Modern botnets such as Zeus and Conficker commonly utilize a technique called domain
fluxing or a domain generation algorithm to generate a large number of pseudo‐random …

[PDF][PDF] DGA-Based Botnet Detection Using DNS Traffic.

Y Zhou, Q Li, Q Miao, K Yim - J. Internet Serv. Inf. Secur., 2013 - isyou.info
In recent years, an increasing number of botnets use Domain Generation Algorithms (DGAs)
to bypass botnet detection systems. DGAs, also referred as “domain fluxing”, has been used …

Detecting bot-infected machines based on analyzing the similar periodic DNS queries

TD Tu, C Guang, LY Xin - 2015 International Conference on …, 2015 - ieeexplore.ieee.org
Modern botnets such as Zeus and Conficker commonly utilize a technique called domain
fluxing or a Domain Generation Algorithm (DGA) to generate a large number of pseudo …

[PDF][PDF] Hybrid rule-based botnet detection approach using machine learning for analysing DNS traffic

S Al-Mashhadi, M Anbar, I Hasbullah… - PeerJ Computer …, 2021 - peerj.com
Botnets can simultaneously control millions of Internet-connected devices to launch
damaging cyber-attacks that pose significant threats to the Internet. In a botnet, bot-masters …

Domain generation algorithm detection using machine learning methods

M Baruch, G David - Cyber security: power and technology, 2018 - Springer
A botnet is a network of private computers infected with malicious software and controlled as
a group without the knowledge of the owners. Botnets are used by cybercriminals for various …

Detection of fast-flux botnets through DNS traffic analysis

E Soltanaghaei, M Kharrazi - Scientia Iranica, 2015 - scientiairanica.sharif.edu
Botnets are networks build up of a large number of bot computers which provide the attacker
with massive resources such as bandwidth, storage, and processing power. In turn allowing …

Botnet detection based on DNS traffic similarity

AM Manasrah, WB Domi… - International Journal of …, 2020 - inderscienceonline.com
Despite the efforts in combating the threat of botnets, they still grow in size and evasion
techniques. The bot software is written once and spreads to other machines all over the …

Botnet detection via mining of traffic flow characteristics

G Kirubavathi, R Anitha - Computers & Electrical Engineering, 2016 - Elsevier
Botnet is one of the most serious threats to cyber security as it provides a distributed platform
for several illegal activities. Regardless of the availability of numerous methods proposed to …

Identifying fast-flux botnet with AGD names at the upper DNS hierarchy

XD Zang, J Gong, SH Mo, A Jakalan, DL Ding - IEEE Access, 2018 - ieeexplore.ieee.org
Modern botnets rely on a new DNS technique called fast-flux to organize compromised
hosts into fast-flux service networks (FFSNs), which helps bot herds to hide their upstream …

A deep learning approach for botnet detection using raw network traffic data

M Shahhosseini, H Mashayekhi, M Rezvani - Journal of Network and …, 2022 - Springer
Botnets are considered to be one of the most serious cybersecurity threats in recent years.
While botnets have been widely studied, they are constantly evolving, becoming more …