Stochastic model of interaction between botnets and distributed computer defense systems

Abstract

Nowadays one of the main means for computer attack organization are botnets. One of botnets' goals is to break computer defense system and the goal of defense system is to neutralize botnets, staying resistant to its targeted attacks. There is lack of efficiency evaluation methods and models, which allow to compare how sustainable is defense system to targeted botnet attacks and vice versa. Proposed model allows to predict the result of interaction between botnet and defense system and can be used as base for building efficient distributed defense system, capable of protecting itself from botnet attacks. © 2012 Springer-Verlag Berlin Heidelberg.