Botnet Detection and Mitigation

This study evaluates botnet behavior and lays the foundation for the development of a tool to generate simulated botnet traffic used to investigate the properties of botnets in large-scale networks. Botnets create widespread security and data safety issues and are effective tools for propagating cyber-crime. It is imperative for the IT community to develop effective means of detecting and mitigating the malicious behavior of botnets. This study enables the investigator: (a) to model the behavior of bots and botnet controllers via state transition diagrams, and lifecycle flowcharts; (b) to generate simulated network flow data equivalent to the behavior of a botnet controller or "bots", and hosts under attack; and (c) to study botnet topologies, behavior and lifecycle events and actions.