title: Towards accurate node-based detection of P2P botnets.
abstract: Botnets are a serious security threat to the current Internet infrastructure. In this paper, we propose a novel direction for P2P botnet detection called node-based detection. This approach focuses on the network characteristics of individual nodes. Based on our model, we examine node's flows and extract the useful features over a given time period. We have tested our approach on real-life data sets and achieved detection rates of 99-100% and low false positives rates of 0-2%. Comparison with other similar approaches on the same data sets shows that our approach outperforms the existing approaches.
authors.affiliation: School of Computer & Software, Nanjing University of Information Science & Technology, Nanjing 210044, China ; Jiangsu Engineering Center of Networking Monitoring, Nanjing University of Information Science & Technology, Nanjing 210044, China.
authors.forename: Chunyong
authors.identifier: 0000-0002-4174-9451
authors.initials: C
authors.lastname: Yin
mesh_terms: D000465:Algorithms; D016494:Computer Security; D020407:Internet; D008962:Models, Theoretical