Mimicking Attack Detection at Hybrid Level

Krishna, V Rama and Subhashini, R (2020) Mimicking Attack Detection at Hybrid Level. EAI Endorsed Transactions on Energy Web, 7 (30). e9. ISSN 2032-944X

[thumbnail of eai.13-7-2018.164630.pdf]
Available under License Creative Commons Attribution No Derivatives.

Download (2MB) | Preview


Botnets are becoming an easy way of creating multiple attacks. One of them was botnets simulate the behaviour that is very near to the legitimate users. Previous research found through semi-Markov model it was difficult to detect mimicking attack based on browsing statistics if attacking bots were sufficiently large in number [1]. By using Bots attackers will collect the user profiles from multiple systems. Bot master (attacker) will study statistics and Bot master will prepare a common profile (or) multiple profiles similar to the user activities. In the next phase, bot master injects profile into user systems through bots. If bot master injects common profile across all bot injected system then the attack was considered as a homogeneous mimicking attack. If bot master injects multiple profiles to the bot injected systems the attack was considered a heterogeneous mimicking attack. As part of our study, we simulated the mimicking attack and worked on detecting at multiple levels. We have developed algorithms of detecting at a server level [2] and the gateway level [3]. In this paper, we are going to discuss the merits and demerits of these two detection algorithms and proposing another architecture module hybrid level detection. Which will be spread across servers and gateway which will have the bird view of activities happening in the network. It collects the statistics from different network elements and based on the analysis of the trace of the bot activities will identify mimicking attack.

Item Type: Article
Uncontrolled Keywords: Botnet, Mimicking attack, semi-markov model, Ips
Subjects: Q Science > QA Mathematics > QA75 Electronic computers. Computer science
QA75 Electronic computers. Computer science
Depositing User: EAI Editor II.
Date Deposited: 04 Feb 2021 14:28
Last Modified: 04 Feb 2021 14:28
URI: https://eprints.eudl.eu/id/eprint/978

Actions (login required)

View Item
View Item