Botnet detecting method based on activity similarity

Abstract

Botnet as a new technology of attacks is a serious threat to Internet security. With the rapid development of the botnet, botnet based several protocols came into being. In accordance with the activity similarity of botnet, a method has application in botnet detection. Firstly, according to the situation and problems of the botnet recently, the life cycle and behavior characteristics of the botnet have been analyzed. After that a method based on activity similarity has been research to detect if a node is in a botnet. Finally, we analyzed and summarized the experimental results, and verified the reliability and rationality of the detection method.