Improvement on Propagation Modeling of New Intelligent Botnet

Article Preview

Abstract:

In order to illustrate and analyze the different features between two-stage advanced botnet propagation modeling and multi time zones modeling, an improved honeypot-aware advanced botnet propagation model using multi time zones is proposed. The model is based on two-stage reconnaissance process and firstly induced the time zones factor, then the diurnal properties of regional variations in online vulnerable populations in multi-time zones is creatively given. Also the novel impact of recovery rate is concerned by simulation.

You might also be interested in these eBooks

Info:

Periodical:

Pages:

2535-2539

Citation:

Online since:

August 2010

Export:

Price:

Permissions CCC:

Permissions PLS:

Сopyright:

© 2010 Trans Tech Publications Ltd. All Rights Reserved

Share:

Citation:

[1] David Dagon. Modeling Botnet Propagation Using Time Zones[C]/13th Annual �etwork and Distributed System Security Symposium (NDSS), San Diego, (2006): 235-249.

Google Scholar

[2] Cliff Zou and Ryan Cunningham. Honeypot-Aware Advanced Botnet Construction and Maintenance[C]/ the International Conference on Dependable Systems and �etworks (DSN), June 25-28, Philadelphia, (2007): 199-208.

DOI: 10.1109/dsn.2006.38

Google Scholar

[3] N. Provos. A virtual honeypot framework. [C]/In Proceedings of 13th USE�IX Security Symposium, San Diego CA, ( 2004): 1-1.

Google Scholar

[4] N. Krawetz. Anti-honeypot technology[J]. IEEE Security and Privacy Magazine, (2004), Vol 2(1): 76 - 79.

DOI: 10.1109/msecp.2004.1264861

Google Scholar

[5] H. Project. Know your enemy: Tracking botnets [EB/OL]. http: /www. honeynet. org/papers/bots/, (2005).

Google Scholar

[6] Cliff Zou, W. Gong and D. Towsley. Worm propagation modeling and analysis under dynamic quarantine defense. [C]/ In Proceedings of ACM CCS Workshop on Rapid Malcode(WORM), Washington, DC USA, (2003): 51 - 60.

DOI: 10.1145/948187.948197

Google Scholar

[7] George Michaelson. RIR delegation reports and address by economy measures [EB/OL]. http: /www. caida. org/projects/oarc/200507/slides/oarc0507-Michaelson. pdf, (2005).

Google Scholar