DocumentCode
528442
Title
The research of detecting IRC botnet based on k-means algorithms
Author
Wang, Zhenqi ; Fu, Li
Author_Institution
Comput. Technol. Dept., North China Electr. Power Univ., Baoding, China
Volume
1
fYear
2010
fDate
June 29 2010-July 1 2010
Firstpage
208
Lastpage
210
Abstract
We present an anomaly-based algorithm for detecting IRC-based botnet meshes. The algorithm combines data mining method. We introduced k-means algorithm to distinguish IRC flows from no IRC flows according to the content in application layer. The method had a high accurate rating to identify IRC flows and did help to find botnet in your network.
Keywords
computer network security; data mining; matrix algebra; multi-agent systems; statistical analysis; IRC based botnet mesh detection; anomaly based algorithm; data mining; k-mean algorithm; IRC; botnet; data mining; database; k-means algorithm; network security;
fLanguage
English
Publisher
ieee
Conference_Titel
Communication Systems, Networks and Applications (ICCSNA), 2010 Second International Conference on
Conference_Location
Hong Kong
Print_ISBN
978-1-4244-7475-2
Type
conf
DOI
10.1109/ICCSNA.2010.5588690
Filename
5588690
Link To Document