Publication: Cooperative network behaviour analysis model for mobile Botnet detection
Date
2016
Authors
Eslahi M.
Yousefi M.
Naseri M.V.
Yussof Y.M.
Tahir N.M.
Hashim H.
Journal Title
Journal ISSN
Volume Title
Publisher
Institute of Electrical and Electronics Engineers Inc.
Abstract
Recently, the mobile devices are well integrated with Internet and widely used by normal users and organizations which employ Bring Your Own Device technology. On the other hand, the mobile devices are less protected in comparison to computers. Therefore, the mobile devices and networks have now become attractive targets for attackers. Amongst several types of mobile threats, the mobile HTTP Botnets can be considered as one of the most sophisticated attacks. A HTTP Bots stealthily infect mobile devices and periodically communicate with their controller called Botmaster. Although the Bots hide their activities amongst the normal web flows, their periodic pattern has been used as a measure to detect their activities. In this paper we propose a cooperative network behaviour analysis model to identify the level of periodicity posed by mobile Bots. Finally three metrics is proposed to detect Mobile HTTP Botnets based on similarity and correlation of their group activities. Test results show that the propose model can efficiently classify communication patterns into several periodicity categories and detect mobile Botnets. � 2016 IEEE.
Description
Behavioral research; Industrial electronics; Malware; Mobile devices; Mobile security; Botnet detections; BYOD Security; Command and control; Mobile HTTP Botnet; Periodic pattern; HTTP