BotFinder: finding bots in network traffic without deep packet inspection

No abstract is available for this paper.

• Publication year

  2012

• Venue

  Conference on Emerging Network Experiment and Technology

• Publication date

  2012-12-10

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/2413176.2413217
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• R: A language and environment for statistical computing.

  2014cited by this paper
• BotTrack: Tracking Botnets Using NetFlow and PageRank

  2011cited by this paper
• JACKSTRAWS: Picking Command and Control Connections from Bot Traffic

  2011cited by this paper
• clues: An R Package for Nonparametric Clustering Based on Local Shrinking

  2010cited by this paper
• Behavioral Clustering of HTTP-Based Malware and Signature Generation Using Malicious Network Traces

  2010cited by this paper
• Friends of an enemy: identifying local members of peer-to-peer botnets using mutual contacts

  2010influential reference
• BotGrep: Finding P2P Bots with Structured Graph Analysis

  2010influential reference
• Exploiting Temporal Persistence to Detect Covert Botnet Channels

  2009cited by this paper
• Automatically Generating Models for Botnet Detection

  2009cited by this paper
• Your botnet is my botnet: analysis of a botnet takeover

  2009cited by this paper
• Scalable, Behavior-Based Malware Clustering

  2009influential reference
• Ether: malware analysis via hardware virtualization extensions

  2008cited by this paper
• Traffic Aggregation for Malware Detection

  2008influential reference
• BitBlaze: A New Approach to Computer Security via Binary Analysis

  2008cited by this paper
• BotMiner: Clustering Analysis of Network Traffic for Protocol- and Structure-Independent Botnet Detection

  2008influential reference
• BotSniffer: Detecting Botnet Command and Control Channels in Network Traffic

  2008influential reference
• Towards Systematic Evaluation of the Evadability of Bot/Botnet Detection Methods

  2008cited by this paper
• An inquiry into the nature and causes of the wealth of internet miscreants

  2007cited by this paper
• BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation

  2007influential reference
• Toward Automated Dynamic Malware Analysis Using CWSandbox

  2007cited by this paper
• CLUES: A non-parametric clustering method based on local shrinking

  2007cited by this paper
• Rishi: Identify Bot Contaminated Hosts by IRC Nickname Evaluation

  2007influential reference
• Misleading worm signature generators using deliberate noise injection

  2006cited by this paper
• Evading network anomaly detection systems: formal reasoning and practical techniques

  2006cited by this paper
• Detecting Botnets with Tight Command and Control

  2006cited by this paper
• An Algorithm for Anomaly-based Botnet Detection

  2006cited by this paper
• Polymorphic Blending Attacks

  2006cited by this paper
• A multifaceted approach to understanding the botnet phenomenon

  2006cited by this paper
• The Zombie Roundup: Understanding, Detecting, and Disrupting Botnets

  2005cited by this paper
• Botnet Tracking: Exploring a Root-Cause Methodology to Prevent Distributed Denial-of-Service Attacks

  2005cited by this paper
• Cisco Systems NetFlow Services Export Version 9

  2004cited by this paper
• Gravitational clustering: a new approach based on the spatial distribution of the points

  1999cited by this paper
• Bro: a system for detecting network intruders in real-time

  1998influential reference
• Finding Groups in Data: An Introduction to Cluster Analysis

  1990cited by this paper
• A k-means clustering algorithm

  1979cited by this paper

• MTDecipher: robust encrypted malicious traffic detection via multi-task graph neural networks

  2026cites this paper
• A Hard-Label Black-Box Evasion Attack against ML-based Malicious Traffic Detection Systems

  2025cites this paper
• Enhanced Web Application Security Through Proactive Dead Drop Resolver Remediation

  2025cites this paper
• Towards Context-Aware Traffic Classification via Time-Wavelet Fusion Network

  2025cites this paper
• Multirelational Twitter Bot Detection Using Graph Neural Networks

  2025cites this paper
• “One Model Fits All Nodes”: Neuron Activation Pattern Analysis-Based Attack Traffic Detection Framework for P2P Networks

  2025influential citation
• Modern DDoS Threats and Countermeasures: Insights into Emerging Attacks and Detection Strategies

  2025cites this paper
• Wedjat: Detecting Sophisticated Evasion Attacks via Real-time Causal Analysis

  2025cites this paper
• EarlyCrow: Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries

  2025cites this paper
• Training with Only 1.0 ‰ Samples: Malicious Traffic Detection via Cross-Modality Feature Fusion

  2025cites this paper
• Real-Time Detection of DDoS in SDN Environments using Self-Attention Mechanisms

  2025cites this paper
• Flow Interaction Graph Analysis: Unknown Encrypted Malicious Traffic Detection

  2024influential citation
• SoK: An Essential Guide For Using Malware Sandboxes In Security Applications: Challenges, Pitfalls, and Lessons Learned

  2024cites this paper
• Intelligent Detection and Analysis Techniques for Botnet Malicious Traffic

  2024cites this paper
• C2Miner: Tricking IoT Malware into Revealing Live Command & Control Servers

  2024cites this paper
• A Survey on Enterprise Network Security: Asset Behavioral Monitoring and Distributed Attack Detection

  2023cites this paper
• Global Analysis with Aggregation-based Beaconing Detection across Large Campus Networks

  2023cites this paper
• Point Cloud Analysis for ML-Based Malicious Traffic Detection: Reducing Majorities of False Positive Alarms

  2023cites this paper
• Detecting Unknown Encrypted Malicious Traffic in Real Time via Flow Interaction Graph Analysis

  2023influential citation
• Detecting DGA-based botnets through effective phonics-based features

  2023cites this paper
• Low-Quality Training Data Only? A Robust Framework for Detecting Encrypted Malicious Network Traffic

  2023cites this paper
• A Deep Learning Approach for Botnet Detection Using Raw Network Traffic Data

  2022cites this paper
• Network Security Modelling with Distributional Data

  2022cites this paper
• Encrypted Malware Traffic Detection via Graph-based Network Analysis

  2022cites this paper
• MalPhase: Fine-Grained Malware Detection Using Network Flow Data

  2021influential citation
• HTTP-Based APT Malware Infection Detection Using URL Correlation Analysis

  2021cites this paper
• Towards Learning-Based, Content-Agnostic Detection of Social Bot Traffic

  2021cites this paper
• Malware Analysis Using Artificial Intelligence and Deep Learning

  2021influential citation
• Successful Computer Forensics Analysis on the Cyber Attack Botnet

  2021cites this paper
• An Inside Look into the Practice of Malware Analysis

  2021cites this paper
• A Survey on TLS-Encrypted Malware Network Traffic Analysis Applicable to Security Operations Centers

  2021cites this paper
• Introduction

  2021cites this paper
• DOLPHIN: Phonics based Detection of DGA Domain Names

  2021cites this paper
• Network Security Modeling using NetFlow Data: Detecting Botnet attacks in IP Traffic

  2021cites this paper
• PORTFILER: Port-Level Network Profiling for Self-Propagating Malware Detection

  2021cites this paper
• AI-infused Security: Robust Defense by Bridging Theory and Practice

  2020cites this paper
• A Frontier: Dependable, Reliable and Secure Machine Learning for Network/System Management

  2020cites this paper
• IoT Behavioral Monitoring via Network Traffic Analysis

  2020cites this paper
• Browser-Based Deep Behavioral Detection of Web Cryptomining with CoinSpy

  2020cites this paper
• BOTection: Bot Detection by Building Markov Chain Models of Bots Network Behavior

  2020cites this paper
• BotMark: Automated botnet detection with hybrid analysis of flow-based and graph-based traffic behaviors

  2020cites this paper
• Show-Based Logical Profound Learning Demonstrates Utilizing ECM Fuzzy Deduction Rules in DDoS Assaults for WLAN 802.11

  2020cites this paper
• The effects of feature selection on the classification of encrypted botnet

  2020cites this paper
• Malware Traffic Classification: Evaluation of Algorithms and an Automated Ground-truth Generation Pipeline

  2020cites this paper
• Hawkware: Network Intrusion Detection based on Behavior Analysis with ANNs on an IoT Device

  2020cites this paper
• Beyond Labeling: Using Clustering to Build Network Behavioral Profiles of Malware Families

  2020influential citation
• A conformalized density-based clustering analysis of malicious traffic for botnet detection

  2020influential citation
• Anomaly Detection for Individual Sequences with Applications in Identifying Malicious Tools

  2020cites this paper
• Packet Length Spectral Analysis for IoT Flow Classification Using Ensemble Learning

  2020cites this paper
• MBTree: Detecting Encryption RAT Communication Using Malicious Behavior Tree

  2020cites this paper
• Using Features of Encrypted Network Traffic to Detect Malware

  2020cites this paper
• Detecting Behavioral Change of IoT Devices Using Clustering-Based Network Traffic Modeling

  2020cites this paper
• Mining The Cluster-level Properties of Bots Network Activities

  2020cites this paper
• A Novel Ensemble Anomaly based Approach for Command and Control Channel Detection

  2020cites this paper
• A Framework for Detecting Botnet Command and Control Communication over an Encrypted Channel

  2020cites this paper
• Big Data Sanitization and Cyber Situational Awareness: A Network Telescope Perspective

  2019cites this paper
• Feature analysis of encrypted malicious traffic

  2019cites this paper
• A Streaming Analytics Language for Processing Cyber Data

  2019cites this paper
• On Designing Machine Learning Models for Malicious Network Traffic Classification

  2019cites this paper
• Finding a Needle in a Haystack: The Traffic Analysis Version

  2019cites this paper
• Alchemy: Stochastic Feature Regeneration for Malicious Network Traffic Classification

  2019cites this paper
• A New Hybrid Approach for C&C Channel Detection

  2019cites this paper
• HTTP Tunnel Trojan Detection Model Based on Deep Learning

  2019cites this paper
• An Outlier Detection Method to Improve Gathered Datasets for Network Behavior Analysis in IoT

  2019cites this paper
• MalPaCA: Malware Packet Sequence Clustering and Analysis

  2019influential citation
• Classifying IoT Devices in Smart Environments Using Network Traffic Characteristics

  2019cites this paper
• Machine Learning for Anomaly Detection under Constraints

  2019cites this paper
• BotSifter: An SDN-based Online Bot Detection Framework in Data Centers

  2019cites this paper
• Feature Selection Strategies for HTTP Botnet Traffic Detection

  2019cites this paper
• A New C&C Channel Detection Framework Using Heuristic Rule and Transfer Learning

  2019cites this paper
• Adversarial Examples for Deep Learning Cyber Security Analytics

  2019cites this paper
• Beyond Labeling: Intuitive Capability Assessment of Malware using Network Behavioral Profiles

  2019influential citation
• BotCap: Machine Learning Approach for Botnet Detection Based on Statistical Features

  2018cites this paper
• Performance of Botnet Detection by Neural Networks in Software-Defined Networks

  2018cites this paper
• Clustering Malware's Network Behavior using Simple Sequential Features

  2018cites this paper
• Challenges and Open Questions of Machine Learning in Computer Security

  2018cites this paper
• GADFly: A Fast and Robust Algorithm to Detect P2P Botnets in Communication Graphs

  2018cites this paper
• Understanding and detecting newly emerging attack vectors in cybercrimes

  2018cites this paper
• A New Scalable Botnet Detection Method in the Frequency Domain

  2018cites this paper
• An In-Depth Study of Open-Source Command and Control Frameworks

  2018cites this paper
• On Inferring and Characterizing Large-Scale Probing and DDoS Campaigns

  2018cites this paper
• Learning communication patterns for malware discovery in HTTPs data

  2018cites this paper
• Understanding the Botnet Phenomenon

  2018cites this paper
• Network Traffic Fingerprinting Based on Approximated Kernel Two-Sample Test

  2018influential citation
• Limitless HTTP in an HTTPS World: Inferring the Semantics of the HTTPS Protocol without Decryption

  2018cites this paper
• Identifying malicious botnet traffic using logistic regression

  2018cites this paper
• MalClassifier: Malware family classification using network flow sequence behaviour

  2018cites this paper
• DDoS Attacks Detection Using Machine Learning Algorithms

  2018cites this paper
• Botnet Detection with Hybrid Analysis on Flow Based and Graph Based Features of Network Traffic

  2018cites this paper
• A Comparison of Machine Learning Approaches to Detect Botnet Traffic

  2018influential citation
• Comprehensive Behavior Profiling Model for Malware Classification

  2018cites this paper
• TorBot Stalker: Detecting Tor Botnets Through Intelligent Circuit Data Analysis

  2018cites this paper
• MADE: Security Analytics for Enterprise Threat Detection

  2018cites this paper
• Securing Services in Networked Cloud Infrastructures

  2018cites this paper
• Data Stream Clustering for Botnet Detection

  2018cites this paper
• The Current Situation of Insider Threats Detection: An Investigative Review

  2018cites this paper
• Unsupervised Anomaly Based Botnet Detection in IoT Networks

  2018cites this paper
• Behavioural monitoring via network communications

  2017cites this paper
• Collaborative botnet detection with partial communication graph information

  2017cites this paper
• An Active and Dynamic Botnet Detection Approach to Track Hidden Concept Drift

  2017cites this paper