Fast flux botnet detection framework using adaptive dynamic evolving spiking neural network algorithm

Al-Nawasrah, A; Al-Momani, A; Meziane, F; Alauthman, M

Abstract

A botnet, a set of compromised machines controlled
distantly by an attacker, is the basis of numerous security threats around the world. Command and Control servers are the backbones of botnet communications, where the bots and botmasters send report and attack orders to each other. Botnets are also categorized according to their C&C protocols.
A Domain Name System method known as Fast-Flux Service Network (FFSN) – a special type of botnet – has been engaged by bot herders to cover malicious botnet
activities and increase the lifetime of malicious servers by quickly changing the IP addresses of the domain name over time. Although several methods have been suggested for detecting FFSNs, they have low detection accuracy especially with zero-day domain. In this
research, we propose a new system called Fast Flux Killer System (FFKS) that has the ability to detect FF-Domains in online mode with an implementation constructed on Adaptive Dynamic evolving Spiking Neural Network (ADeSNN). The proposed system proved
its ability to detect FF domains in online mode with high detection accuracy (98.77%) compare with other algorithms, with low false positive and negative rates respectively. It is also proved a high level of performance. Additionally, the proposed adaptation of the algorithm enhanced and helped in the parameters customization
process.

Citation

Al-Nawasrah, A., Al-Momani, A., Meziane, F., & Alauthman, M. (2018, April). Fast flux botnet detection framework using adaptive dynamic evolving spiking neural network algorithm. Presented at The 9th International Conference on Information and Communication Systems (ICICS 2018), Irbid, Jordan

• Presentation Conference Type: Other
• Conference Name: The 9th International Conference on Information and Communication Systems (ICICS 2018)
• Conference Location: Irbid, Jordan
• Start Date: Apr 3, 2018
• End Date: Apr 5, 2018
• Online Publication Date: May 7, 2018
• Publication Date: Apr 3, 2018
• Deposit Date: Apr 10, 2018
• Publicly Available Date: Apr 10, 2018
• DOI: https://doi.org/10.1109/IACS.2018.8355433
• Publisher URL: https://doi.org/10.1109/IACS.2018.8355433
• Additional Information: Additional Information : Proceedings ISBN: 978-1-5386-4366-2; Event Type : Conference