Article,

Genetic Algorithm based Layered Detection and Defense of HTTP Botnet

.
ACEEE International Journal of Network Security, 5 (1): 12 (January 2014)

Abstract

A System state in HTTP botnet uses HTTP protocol for the creation of chain of Botnets thereby compromising other systems. By using HTTP protocol and port number 80, attacks can not only be hidden but also pass through the firewall without being detected. The DPR based detection leads to better analysis of botnet attacks 3. However, it provides only probabilistic detection of the attacker and also time consuming and error prone. This paper proposes a Genetic algorithm based layered approach for detecting as well as preventing botnet attacks. The paper reviews p2p firewall implementation which forms the basis of filtering. Performance evaluation is done based on precision, F-value and probability. Layered approach reduces the computation and overall time requirement 7. Genetic algorithm promises a low false positive rate.

Tags

Users

  • @ideseditor

Comments and Reviews