Poster: Challenges of accurately measuring churn in P2P botnets

Leon Böck; Shankar  Karuppayah; Kory Fong; Max Mühlhäuser; Emmanouil Vasilomanolakis

doi:10.1145/3319535.3363281

Poster: Challenges of accurately measuring churn in P2P botnets

Leon Böck, Shankar Karuppayah, Kory Fong, Max Mühlhäuser, Emmanouil Vasilomanolakis

Research output: Contribution to book/anthology/report/conference proceeding › Article in proceeding › Research › peer-review

Abstract

Peer-to-peer (P2P) botnets are known to be highly resilient to takedown attempts. Such attempts are usually carried out by exploiting vulnerabilities in the bots communication protocol. However, a failed takedown attempt may alert botmasters and allow them to patch their vulnerabilities to thwart subsequent attempts. As a promising solution, takedowns could be evaluated in simulation environments before attempting them in the real world. To ensure such simulations are as realistic as possible, the churn behavior of botnets must be understood and measured accurately. This paper discusses potential pitfalls when measuring churn in live P2P botnets and proposes a botnet monitoring framework for uniform data collection and churn measurement for P2P botnets.

Original language	English
Title of host publication	CCS 2019 - Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security
Number of pages	3
Publisher	Association for Computing Machinery
Publication date	2019
Pages	2661-2663
ISBN (Print)	978-1-4503-6747-9
DOIs	https://doi.org/10.1145/3319535.3363281
Publication status	Published - 2019
Event	Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security: CCS`19 - London, United Kingdom Duration: 11 Nov 2019 → 15 Nov 2019

Conference

Conference	Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security
Country/Territory	United Kingdom
City	London
Period	11/11/2019 → 15/11/2019

Keywords

botnets
churn
P2P botnets

Access to Document

10.1145/3319535.3363281

AUB Link

Search for the material in Aalborg University Library's search engine

Cite this

@inproceedings{0f3a2b3a8ddc4853b065870db86db901,

title = "Poster: Challenges of accurately measuring churn in P2P botnets",

abstract = "Peer-to-peer (P2P) botnets are known to be highly resilient to takedown attempts. Such attempts are usually carried out by exploiting vulnerabilities in the bots communication protocol. However, a failed takedown attempt may alert botmasters and allow them to patch their vulnerabilities to thwart subsequent attempts. As a promising solution, takedowns could be evaluated in simulation environments before attempting them in the real world. To ensure such simulations are as realistic as possible, the churn behavior of botnets must be understood and measured accurately. This paper discusses potential pitfalls when measuring churn in live P2P botnets and proposes a botnet monitoring framework for uniform data collection and churn measurement for P2P botnets.",

keywords = "botnets, churn, P2P botnets",

author = "Leon B{\"o}ck and Shankar Karuppayah and Kory Fong and Max M{\"u}hlh{\"a}user and Emmanouil Vasilomanolakis",

year = "2019",

doi = "10.1145/3319535.3363281",

language = "English",

isbn = "978-1-4503-6747-9",

pages = "2661--2663",

booktitle = "CCS 2019 - Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security",

publisher = "Association for Computing Machinery",

address = "United States",

note = "Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security : CCS`19 ; Conference date: 11-11-2019 Through 15-11-2019",

}

Böck, L, Karuppayah, S, Fong, K, Mühlhäuser, M & Vasilomanolakis, E 2019, Poster: Challenges of accurately measuring churn in P2P botnets. in CCS 2019 - Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. Association for Computing Machinery, pp. 2661-2663, Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, London, United Kingdom, 11/11/2019. https://doi.org/10.1145/3319535.3363281

Poster: Challenges of accurately measuring churn in P2P botnets. / Böck, Leon; Karuppayah, Shankar ; Fong, Kory et al.
CCS 2019 - Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. Association for Computing Machinery, 2019. p. 2661-2663.

Research output: Contribution to book/anthology/report/conference proceeding › Article in proceeding › Research › peer-review

TY - GEN

T1 - Poster

T2 - Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security

AU - Böck, Leon

AU - Karuppayah, Shankar

AU - Fong, Kory

AU - Mühlhäuser, Max

AU - Vasilomanolakis, Emmanouil

PY - 2019

Y1 - 2019

N2 - Peer-to-peer (P2P) botnets are known to be highly resilient to takedown attempts. Such attempts are usually carried out by exploiting vulnerabilities in the bots communication protocol. However, a failed takedown attempt may alert botmasters and allow them to patch their vulnerabilities to thwart subsequent attempts. As a promising solution, takedowns could be evaluated in simulation environments before attempting them in the real world. To ensure such simulations are as realistic as possible, the churn behavior of botnets must be understood and measured accurately. This paper discusses potential pitfalls when measuring churn in live P2P botnets and proposes a botnet monitoring framework for uniform data collection and churn measurement for P2P botnets.

AB - Peer-to-peer (P2P) botnets are known to be highly resilient to takedown attempts. Such attempts are usually carried out by exploiting vulnerabilities in the bots communication protocol. However, a failed takedown attempt may alert botmasters and allow them to patch their vulnerabilities to thwart subsequent attempts. As a promising solution, takedowns could be evaluated in simulation environments before attempting them in the real world. To ensure such simulations are as realistic as possible, the churn behavior of botnets must be understood and measured accurately. This paper discusses potential pitfalls when measuring churn in live P2P botnets and proposes a botnet monitoring framework for uniform data collection and churn measurement for P2P botnets.

KW - botnets

KW - churn

KW - P2P botnets

UR - http://www.scopus.com/inward/record.url?scp=85075928839&partnerID=8YFLogxK

U2 - 10.1145/3319535.3363281

DO - 10.1145/3319535.3363281

M3 - Article in proceeding

SN - 978-1-4503-6747-9

SP - 2661

EP - 2663

BT - CCS 2019 - Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security

PB - Association for Computing Machinery

Y2 - 11 November 2019 through 15 November 2019

ER -

Poster: Challenges of accurately measuring churn in P2P botnets

Abstract

Conference

Keywords

Access to Document

AUB Link

Other files and links

Fingerprint

Cite this