BLOBOT: BLOcking BOTs at the Doorstep

Abstract

In this paper we present BLOBOT, a tool for detecting botnets. BLOBOT detects botnets by detecting their command and control network. In contrast to common approaches that operate, often off-line, on aggregate network traffic, BLOBOT operates on a single user’s traffic so increasing the ability of detecting botnets in real-time. Blobot features a tradeoff between usability, security and efficiency. Preliminary experimental results prove that BLOBOT is an effective tool against botnets.