BotShark — Detection and prevention of peer-to-peer botnets by tracking conversation using CART

Abstract

Botnets are networks of malware-compromised machines that are controlled by an opponent are the cause of a large number of problems on the internet. They are increasing faster than any other type of malware and have created a huge army of hosts over the internet. Managed by the Botmaster, they conduct distributed denial-of-service (DDoS) attacks, email spamming, key logging, abusing online advertisements, spreading new malware, etc. Today, the Botnet population is growing rapidly and they represent some computer armies and have become a huge threat on the Internet. In this work, we have proposed new network defense system for detection and prevention of peer-to-peer botnets by tracking conversation using CART.