| Author | Böck, Leon; Shankar, Karuppayah; Mühlhäuser, Max; Emmanouil, Vasilomanolakis |
|---|
| Date | 2020 |
|---|
| Type | Journal Article |
|---|
| Abstract | Conducting research on botnets is oftentimes limited to the analysis of active botnets. This prevents researchers from testing detection and tracking mechanisms on potential future threats. Specifically, in the domain of P2P botnets, the protocol specifics, network churn and anti-tracking mechanisms greatly impact the success or failure of monitoring operations.
Moreover, experiments on real world botnets, commonly lack ground truth to verify the findings. As developing and deploying botnets of sufficient size is accompanied by large costs and administration efforts, this paper attempts to address this issue by introducing a simulation framework for P2P botnets called Botnet Simulation Framework (BSF). BSF can simulate monitoring operations in botnets of more than 20.000 bots to evaluate tracking mechanisms or simulate takedown efforts. Moreover, communication traces can be exported to inject traffic into arbitrary PCAP files for training and evaluation of intrusion detection systems. |
|---|
| ISSN | 2494-2715 |
|---|
| In | The Journal on Cybercrime & Digital Investigations, p.1-10 |
|---|
| Publisher | Centre Expert contre la Cybercriminalité Français |
|---|
| Url | https://tubiblio.ulb.tu-darmstadt.de/id/eprint/128614 |
|---|
