Matches in SemOpenAlex for { <https://semopenalex.org/work/W2536601910> ?p ?o ?g. }
Showing items 1 to 92 of
92
with 100 items per page.
- W2536601910 abstract "Botnets are widely used for acquiring economic profits, by launching attacks such as distributed denial-of-service (DDoS), identification theft, ad-ware installation, mass spamming, and click frauds. Many approaches have been proposed to detect botnet, which rely on end-host installations or operate on network traffic with deep packet inspection. They have limitations for detecting botnets which use evasion techniques such as packet encryption, fast flux, dynamic DNS and DGA. Sporadic botnet behavior caused by disconnecting the power of system or botnet's own nature also brings unignorable false detection. Furthermore, normal user's traffic causes a lot of false alarms. In this paper, we propose a novel approach called PsyBoG to detect botnets by capturing periodic activities. PsyBoG leverages signal processing techniques, PSD (Power Spectral Density) analysis, to discover the major frequencies from the periodic DNS queries of botnets. The PSD analysis allows us to detect sophisticated botnets irrespective of their evasion techniques, sporadic behavior and even the noise traffic generated by normal users. To evaluate PsyBoG, we utilize the real-world DNS traces collected from a /16 campus network including more than 48,046K queries, 34K distinct IP addresses and 146K domains. Finally, PsyBoG caught 19 unknown and 6 known botnet groups with 0.1% false positives." @default.
- W2536601910 created "2016-10-28" @default.
- W2536601910 creator A5034083735 @default.
- W2536601910 creator A5055794339 @default.
- W2536601910 creator A5056518136 @default.
- W2536601910 creator A5062852652 @default.
- W2536601910 creator A5071785436 @default.
- W2536601910 date "2014-10-01" @default.
- W2536601910 modified "2023-09-24" @default.
- W2536601910 title "PsyBoG: Power spectral density analysis for detecting botnet groups" @default.
- W2536601910 cites W1809063480 @default.
- W2536601910 cites W1909110254 @default.
- W2536601910 cites W1932621476 @default.
- W2536601910 cites W2000412410 @default.
- W2536601910 cites W2059078968 @default.
- W2536601910 cites W2087995184 @default.
- W2536601910 cites W2120256168 @default.
- W2536601910 cites W2126881776 @default.
- W2536601910 cites W2157949690 @default.
- W2536601910 cites W2164348526 @default.
- W2536601910 cites W27994497 @default.
- W2536601910 doi "https://doi.org/10.1109/malware.2014.6999414" @default.
- W2536601910 hasPublicationYear "2014" @default.
- W2536601910 type Work @default.
- W2536601910 sameAs 2536601910 @default.
- W2536601910 citedByCount "10" @default.
- W2536601910 countsByYear W25366019102016 @default.
- W2536601910 countsByYear W25366019102018 @default.
- W2536601910 countsByYear W25366019102019 @default.
- W2536601910 countsByYear W25366019102022 @default.
- W2536601910 countsByYear W25366019102023 @default.
- W2536601910 crossrefType "proceedings-article" @default.
- W2536601910 hasAuthorship W2536601910A5034083735 @default.
- W2536601910 hasAuthorship W2536601910A5055794339 @default.
- W2536601910 hasAuthorship W2536601910A5056518136 @default.
- W2536601910 hasAuthorship W2536601910A5062852652 @default.
- W2536601910 hasAuthorship W2536601910A5071785436 @default.
- W2536601910 hasConcept C110875604 @default.
- W2536601910 hasConcept C111919701 @default.
- W2536601910 hasConcept C116834253 @default.
- W2536601910 hasConcept C126831891 @default.
- W2536601910 hasConcept C148730421 @default.
- W2536601910 hasConcept C158379750 @default.
- W2536601910 hasConcept C158955206 @default.
- W2536601910 hasConcept C18903297 @default.
- W2536601910 hasConcept C203014093 @default.
- W2536601910 hasConcept C204679922 @default.
- W2536601910 hasConcept C22735295 @default.
- W2536601910 hasConcept C2781251061 @default.
- W2536601910 hasConcept C31258907 @default.
- W2536601910 hasConcept C38652104 @default.
- W2536601910 hasConcept C38822068 @default.
- W2536601910 hasConcept C41008148 @default.
- W2536601910 hasConcept C59822182 @default.
- W2536601910 hasConcept C86803240 @default.
- W2536601910 hasConcept C8891405 @default.
- W2536601910 hasConceptScore W2536601910C110875604 @default.
- W2536601910 hasConceptScore W2536601910C111919701 @default.
- W2536601910 hasConceptScore W2536601910C116834253 @default.
- W2536601910 hasConceptScore W2536601910C126831891 @default.
- W2536601910 hasConceptScore W2536601910C148730421 @default.
- W2536601910 hasConceptScore W2536601910C158379750 @default.
- W2536601910 hasConceptScore W2536601910C158955206 @default.
- W2536601910 hasConceptScore W2536601910C18903297 @default.
- W2536601910 hasConceptScore W2536601910C203014093 @default.
- W2536601910 hasConceptScore W2536601910C204679922 @default.
- W2536601910 hasConceptScore W2536601910C22735295 @default.
- W2536601910 hasConceptScore W2536601910C2781251061 @default.
- W2536601910 hasConceptScore W2536601910C31258907 @default.
- W2536601910 hasConceptScore W2536601910C38652104 @default.
- W2536601910 hasConceptScore W2536601910C38822068 @default.
- W2536601910 hasConceptScore W2536601910C41008148 @default.
- W2536601910 hasConceptScore W2536601910C59822182 @default.
- W2536601910 hasConceptScore W2536601910C86803240 @default.
- W2536601910 hasConceptScore W2536601910C8891405 @default.
- W2536601910 hasLocation W25366019101 @default.
- W2536601910 hasOpenAccess W2536601910 @default.
- W2536601910 hasPrimaryLocation W25366019101 @default.
- W2536601910 hasRelatedWork W1600581236 @default.
- W2536601910 hasRelatedWork W1926916177 @default.
- W2536601910 hasRelatedWork W2432276189 @default.
- W2536601910 hasRelatedWork W2535952706 @default.
- W2536601910 hasRelatedWork W2951373897 @default.
- W2536601910 hasRelatedWork W3005900565 @default.
- W2536601910 hasRelatedWork W3117634829 @default.
- W2536601910 hasRelatedWork W3211183476 @default.
- W2536601910 hasRelatedWork W811956984 @default.
- W2536601910 hasRelatedWork W1974083732 @default.
- W2536601910 isParatext "false" @default.
- W2536601910 isRetracted "false" @default.
- W2536601910 magId "2536601910" @default.
- W2536601910 workType "article" @default.