DocumentCode :
592699
Title :
Supervised classification of packets coming from a HTTP botnet
Author :
Brezo, F. ; Gaviria de la Puerta, J. ; Ugarte-Pedrero, X. ; Santos, Igor ; Bringas, Pablo G. ; Barroso, D.
Author_Institution :
DeustoTech Comput., Univ. de Deusto, Deusto, Spain
fYear :
2012
fDate :
1-5 Oct. 2012
Firstpage :
1
Lastpage :
8
Abstract :
The posibilities that the management of a vast amount of computers and/or networks offer, is attracting an increasing number of malware writers. In this document, the authors propose a methodology thought to detect malicious botnet traffic, based on the analysis of the packets flow that circulate in the network. This objective is achieved by means of the parametrization of the static characteristics of packets, which are lately analysed using supervised machine learning techniques focused on traffic labelling so as to face proactively to the huge volume of information nowadays filters work with.
Keywords :
computer network management; computer network security; information filters; invasive software; learning (artificial intelligence); pattern classification; telecommunication traffic; transport protocols; HTTP botnet; computer network management; information filters; malicious botnet traffic detection; packet flow analysis; packet static characteristics parametrization; supervised machine learning techniques; supervised packet classification; traffic labelling; Electronic mail; IP networks; Irrigation; Machine learning; Malware; Monitoring; Silicon compounds; Botnet; Detection; Machine Learning; Packets; Supervised;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Informatica (CLEI), 2012 XXXVIII Conferencia Latinoamericana En
Conference_Location :
Medellin
Print_ISBN :
978-1-4673-0794-9
Type :
conf
DOI :
10.1109/CLEI.2012.6427168
Filename :
6427168
Link To Document :
بازگشت