Proactive Botnet Detection: Through Characterization of Distributed Denial of Service Attacks Contributor(s): Hyslip, Thomas S. (Author) |
|
ISBN: 1508433119 ISBN-13: 9781508433118 Publisher: Createspace Independent Publishing Platform OUR PRICE: $5.61 Product Type: Paperback Published: April 2015 |
Additional Information |
BISAC Categories: - Computers | Security - General |
Physical Information: 0.27" H x 8.5" W x 11.02" (0.68 lbs) 126 pages |
Descriptions, Reviews, Etc. |
Publisher Description: In this quantitative quasi-experimental study two distributed denial of service attacks were captured and the characteristics of the attacks were used to detect botnets by identifying egressing distributed denial of service attack packets at the source of the attack. A sample Dark DDoSer botnet was constructed and used to launch a distributed denial of service attack. The characteristics of the distributed denial of service attacks were used as the independent variables in a quasi-experiment where network traffic was monitored with Snort to detect DDoS packets. The dependent variable for the experiment was false positive alerts for the DDoS packets. The findings showed that the characteristics of a distributed denial of service attack can be used to pro-actively detect botnets through egress monitoring. |