Botnet Detection Approach for the Distributed Systems

Abstract

This article presents the technique for botnet detection using the distributed systems in the local area network. Distributed system contains host and network levels. At the host level, the botnets detection is based on Bayes classification. In order to perform the classification, the classes and subclasses were constructed on the basis of botnets patterns. An algorithm for classifier training was developed. The network level provides the exchange of the classification results for the knowledge transfer to the rest of the antivirus program units of the distributed system.