KMITL

Permanent URI for this communityhttps://dspace.kmitl.ac.th/handle/123456789/1

Browse

Settings

Author: search.filters.author.Kikuchi, HiroakiSubject: search.filters.subject.botnet

Search Results

Now showing 1 - 3 of 3
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Publication,
    Temporal behaviors of Top-10 malware download in 2010-2012
    (2014-10-15)
    Yukonhiatou, Chaxiong
    ;
    Kittitornkun, Surin
    ;
    Kikuchi, Hiroaki
    ;
    Sisaat, Khamphao
    ;
    Terada, Masato
    Malware can be widely downloaded over the Internet by the bot-infected computers according to their botmaster in order to form a botnet and eventually to perform cyber attacks. This paper analyzes and summarizes the malware download behaviors of Top-10 malware based on 2010 CCC, 2011 CCC and 2012 IIJ MITF datasets. The datasets contain millions of download logs collected from several Honeypots located in Japan observing malware/bot traffic and activities. These log data have been processed and analyzed in terms of daily and hourly downloads based on our Top-10 processing algorithm. As a result, both daily and hourly download patterns in each year are quite different due to different malware families and spreading protocols.
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Publication,
    Temporal behavior analysis of malware/bot downloads using top-10 processing
    (2013-12-01)
    Yukonhiatou, Chaxiong
    ;
    Kittitornkun, Surin
    ;
    Kikuchi, Hiroaki
    ;
    Sisaat, Khamphao
    ;
    Terada, Masato
    Nowadays malware can be spread over the Internet using botnets to download. This preliminary work presents temporal download behavior of Top-10 malware based on 2010 and 2011 CCC (Cyber Clean Center) datasets in terms of number of downloads per day and per hour. The datasets contain download logs of several independent honeypots in Japan to observe malware traffic and its activities. Our results show sequences and similar patterns of malware downloads in 2010. On the other hand, the behaviors in 2011 are quite different from those of 2010 that no obvious sequences and patterns can be detected. © 2013 IEEE.
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Publication,
    Clustering Top-10 malware/bots based on download behavior
    (2013-01-01)
    Yukonhiatou, Chaxiong
    ;
    Kittitornkun, Surin
    ;
    Kikuchi, Hiroaki
    ;
    Sisaat, Khamphao
    ;
    Terada, Masato
    Malware can be spread over the Internet via especially download mechanism to the victim computers. This work tries to cluster malware/bots download behavior of Top-10 malware based on 2010 and 2011 CCC (Cyber Clean Center) datasets. The datasets contain more than one million download logs collected from several independent honeypots in Japan to observe malware/bot traffic and activities. Although the daily and hourly patterns are quite similar in 2010, those of 2011 are quite different. As a result, the proposed Integral Correlation Coefficient can cluster 3 and 4 groups of Top-10 malware/bots in 2010 and 2011, respectively. © 2013 IEEE.