In this paper we present BLOBOT, a tool for detecting botnets. BLOBOT detects botnets by detecting their command and control network. In contrast to common approaches that operate, often off-line, on aggregate network traffic, BLOBOT operates on a single user's traffic so increasing the ability of detecting botnets in real-time. Blobot features a tradeoff between usability, security and efficiency. Preliminary experimental results prove that BLOBOT is an effective tool against botnets.
BLOBOT: BLOcking BOTs at the Doorstep
DINI, GIANLUCA;
2009-01-01
Abstract
In this paper we present BLOBOT, a tool for detecting botnets. BLOBOT detects botnets by detecting their command and control network. In contrast to common approaches that operate, often off-line, on aggregate network traffic, BLOBOT operates on a single user's traffic so increasing the ability of detecting botnets in real-time. Blobot features a tradeoff between usability, security and efficiency. Preliminary experimental results prove that BLOBOT is an effective tool against botnets.File in questo prodotto:
Non ci sono file associati a questo prodotto.
I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.
