Conversation-based P2P botnet detection with decision fusion

Simple item page
dc.contributor.advisorGhorbani, Ali
dc.contributor.authorZhang, Shaojun
dc.date.accessioned2023-03-01T16:33:44Z
dc.date.available2023-03-01T16:33:44Z
dc.date.issued2013
dc.date.updated2016-12-13T00:00:00Z
dc.description.abstractBotnets have been identified as one of the most dangerous threats through the Internet. A botnet is a collection of compromised computers called zombies or bots controlled by malicious machines called botmasters through the command and control (C&C) channel. Botnets can be used for plenty of malicious behaviours, including DDOS, Spam, stealing sensitive information to name a few, all of which could be very serious threats to parts of the Internet. In this thesis, we propose a peer-to-peer (P2P) botnet detection approach based on 30-second conversation. To the best of our knowledge, this is the first time conversation-based features are used to detect P2P botnets. The features extracted from conversations can differentiate P2P botnet conversations from normal conversations by applying machine learning techniques. Also, feature selection processes are carried out in order to reduce the dimension of the feature vectors. Decision tree (DT) and support vector machine (SVM) are applied to classify the normal conversations and the P2P botnet conversations. Finally, the results from different classifiers are combined based on the probability models in order to get a better result.
dc.description.copyright© Shaojun Zhang, 2013
dc.description.noteElectronic Only (UNB thesis number) Thesis 9143 (OCoLC) 960860070
dc.description.noteM.C.S., University of New Brunswick, Faculty of Computer Science, 2013.
dc.formattext/xml
dc.format.extentxiv, 122 pages
dc.format.mediumelectronic
dc.identifier.oclc(OCoLC) 960860070
dc.identifier.otherThesis 9143
dc.identifier.urihttps://unbscholar.lib.unb.ca/handle/1882/14109
dc.language.isoen_CA
dc.publisherUniversity of New Brunswick
dc.rightshttp://purl.org/coar/access_right/c_abf2
dc.subject.disciplineComputer Science
dc.subject.lcshCyberterrorism.
dc.subject.lcshComputer networks -- Security measures.
dc.subject.lcshPeer-to-peer architecture (Computer networks)
dc.subject.lcshSupport vector machines.
dc.subject.lcshDecision trees.
dc.titleConversation-based P2P botnet detection with decision fusion
dc.typemaster thesis
thesis.degree.disciplineComputer Science
thesis.degree.fullnameMaster of Computer Science
thesis.degree.grantorUniversity of New Brunswick
thesis.degree.levelmasters
thesis.degree.nameM.C.S.

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
item.pdf
Size:
2.79 MB
Format:
Adobe Portable Document Format
Download

Collections

Open Theses & Dissertations