Detecting Botnet based on Network Traffic

Abstract

Nowadays, to bypass the surveillance of intrusion detection and prevention systems, cyber attackers often find ways to use botnets to connect and control malicious code. If the process of controlling and connecting from malicious code to the control server is detected and prevented, the whole attack will fail. Therefore, the problem of early detection of botnet networks in the system is very necessary today. There have been many methods of detecting botnet based on network traffic using sign sets and behavior sets. In this work, we will introduce the method of using machine learning to detect botnet signals in the system based on their abnormal behavior which collected on network traffic.