Detecting P2P Botnet by Analyzing Macroscopic Characteristics with Fractal and Information Fusion

	Detecting P2P Botnet by Analyzing Macroscopic Characteristics with Fractal and Information Fusion
	Song, Y. Z.
	2015
发表期刊	China Communications
卷号	12 期号:2 页码:107-117
摘要	Towards the problems of existing detection methods, a novel real-time detection method (DMFIF) based on fractal and information fusion is proposed. It focuses on the intrinsic macroscopic characteristics of network, which reflect not the "unique" abnormalities of P2P botnets but the "common" abnormalities of them. It regards network traffic as the signal, and synthetically considers the macroscopic characteristics of network under different time scales with the fractal theory, including the self-similarity and the local singularity, which don't vary with the topology structures, the protocols and the attack types of P2P botnet. At first detect traffic abnormalities of the above characteristics with the nonparametric CUSUM algorithm, and achieve the final result by fusing the above detection results with the Dempster-Shafer evidence theory. Moreover, the side effect on detecting P2P botnet which web applications generated is considered. The experiments show that DMFIF can detect P2P botnet with a higher degree of precision.
收录类别	SCI
文献类型	期刊论文
条目标识符	http://ir.ciomp.ac.cn/handle/181722/55402
专题	中科院长春光机所知识产出
推荐引用方式 GB/T 7714	Song, Y. Z.. Detecting P2P Botnet by Analyzing Macroscopic Characteristics with Fractal and Information Fusion[J]. China Communications,2015,12(2):107-117.
APA	Song, Y. Z..(2015).Detecting P2P Botnet by Analyzing Macroscopic Characteristics with Fractal and Information Fusion.China Communications,12(2),107-117.
MLA	Song, Y. Z.."Detecting P2P Botnet by Analyzing Macroscopic Characteristics with Fractal and Information Fusion".China Communications 12.2(2015):107-117.

条目包含的文件		下载所有文件
文件名称/大小	文献类型	版本类型	开放类型	使用许可
Song-2015-Detecting （1055KB）	期刊论文	作者接受稿	开放获取	CC BY-NC-SA	浏览下载