Detecting and Blocking Malicious Traffic Caused by IRC Protocol Based Botnets

Abstract

One of the most potentially dangerous security problems for computer networks is the botnet. Since botnets based on the IRC (Internet chat relay) protocol are relatively new, not enough research has been done on them. In this paper, we propose a method to detect the botmaster by starting from the victim and working backwards through the routers. The malicious traffic is blocked during the process of detecting the botmaster router by router.