Loading...
A discovery of sequential attack patterns of malware in botnets
Author(s)
Date Issued
December 1, 2010
Type
Conference Paper
Abstract
More than 90 independent honeypots have observed malware traffic at the Japanese tier-1 backbone. Typical attacks were made by multiple servers, coordinating to send many kinds of malware. T his paper aims to discover some frequent new sequential attack patterns of malware. It is not easy to identify particular patterns logs of one year because the volume of dataset is too large to investigate one by one. To overcome the problem, this paper proposes data mining algorithm, the PrejixSpan method. We implement the PrejixSpan algorithm to analyze the malware footprints and show the experimental result. The result of analysis shows that the attacks are performed by multiple sequential attack patterns within a short amount of time. ©2010 IEEE.
Citation
Conference Proceedings IEEE International Conference on Systems Man and Cybernetics, 2564-2570, 2010