A Supervised Classification Approach for Detecting Packets Originated in a HTTP-based Botnet

Abstract

The possibilities that the management of a vast amount of computers and/or networks oer is attracting an increasing number of malware writers. In this document, the authors propose a methodology thought to detect malicious botnet trac, based on the analysis of the packets that ow within the network. This objective is achieved by means of the extraction of the static characteristics of packets, which are lately analysed using supervised machine learning techniques focused on trac labelling so as to proactively face the huge volume of information nowadays lters work with.