TY - GEN
T1 - Descriptive model of peer-to-peer botnet structures
AU - Duan, Junfeng
AU - Jiao, Jian
AU - Xia, Chunhe
AU - Yao, Shan
AU - Li, Xiaojian
PY - 2010
Y1 - 2010
N2 - Peer-to-peer (P2P) Botnets, which are more resilient and robust than centralized botnets, have emerged as the peer-to-peer technology evolves. Better understanding of this new phenomenon will help researchers develop detection and mitigation methods. Most of existing work is case study of typical P2P botnets. In this paper, we focus on systematically analyzing structures of P2P botnets. We propose a descriptive model of P2P botnet structures, which consists of features of P2P bot, definitions of structures, and structural properties. Firstly, we detail two key functionalities of P2P bot, command-and-control (C&C) functionality and peer-to-peer (P2P) functionality, and give several features of P2P bot. And then, we define two structures of P2P botnets: C&C structure and P2P structure. To characterize these structures, we propose several properties and corresponding quantitative methods. Finally, we conduct experiments to verify our results.
AB - Peer-to-peer (P2P) Botnets, which are more resilient and robust than centralized botnets, have emerged as the peer-to-peer technology evolves. Better understanding of this new phenomenon will help researchers develop detection and mitigation methods. Most of existing work is case study of typical P2P botnets. In this paper, we focus on systematically analyzing structures of P2P botnets. We propose a descriptive model of P2P botnet structures, which consists of features of P2P bot, definitions of structures, and structural properties. Firstly, we detail two key functionalities of P2P bot, command-and-control (C&C) functionality and peer-to-peer (P2P) functionality, and give several features of P2P bot. And then, we define two structures of P2P botnets: C&C structure and P2P structure. To characterize these structures, we propose several properties and corresponding quantitative methods. Finally, we conduct experiments to verify our results.
KW - Peer to peer Botnets
KW - Structural properties
KW - Structures
UR - https://www.scopus.com/pages/publications/78649917990
U2 - 10.1109/ICEIT.2010.5608400
DO - 10.1109/ICEIT.2010.5608400
M3 - 会议稿件
AN - SCOPUS:78649917990
SN - 9781424480340
T3 - ICEIT 2010 - 2010 International Conference on Educational and Information Technology, Proceedings
SP - V3153-V3157
BT - ICEIT 2010 - 2010 International Conference on Educational and Information Technology, Proceedings
T2 - 2010 International Conference on Educational and Information Technology, ICEIT 2010
Y2 - 17 September 2010 through 19 September 2010
ER -