基于随机森林的僵尸网络流量检测

肖琦; 苏开宇

Chinese

您当前的位置：

首页 >

文章列表页 >

基于随机森林的僵尸网络流量检测

更新时间：2026-09-04

- 基于随机森林的僵尸网络流量检测
- Botnet traffic detection based on random forest algorithm
- 微电子学与计算机 2019年36卷第3期页码：43-47
- 作者机构：
  
  1. 中国计量大学机构信息工程学院,浙江,杭州,310018
  2. 中国计量大学现代教育技术中心,浙江,杭州,310018
- 作者简介：
- 基金信息：
- DOI：
  中图分类号：
- 纸质出版：2019
- 稿件说明：
移动端阅览
肖琦, 苏开宇. 基于随机森林的僵尸网络流量检测[J]. 微电子学与计算机, 2019, 36(3): 43-47.

XIAO Qi, SU Kai-yu. Botnet traffic detection based on random forest algorithm[J]. 2019, 36(3): 43-47.
肖琦, 苏开宇. 基于随机森林的僵尸网络流量检测[J]. 微电子学与计算机, 2019, 36(3): 43-47. DOI：

XIAO Qi, SU Kai-yu. Botnet traffic detection based on random forest algorithm[J]. 2019, 36(3): 43-47. DOI：

摘要

近年来

僵尸网络已经成为互联网领域所面临的严重的安全威胁之一.僵尸网络的控制者使用僵尸程序进行例如DDOS攻击

发送垃圾邮件

盗取敏感信息等一系列恶意活动.在海量的互联网流量中

从正常流量中有效的识别出僵尸网络流量是亟待解决的问题.本文的研究目的是分析和识别僵尸网络流量.实验在真实的包含僵尸网络流量数据中提取了9种特征

采用随机森林算法作为训练模型

与5种其他机器学习算法进行比较

实验结果表明本文提出的模型在给出的评价标准下性能最优.

Abstract

In recent years

Botnets have become one of the serious security threats in the Internet field. Botnet controllers used bots process to perform a series of malicious activities

such as DDOS attacks

sending spam

stealing sensitive user information

and so on. Identification of botnet traffic from normal traffic in the massive internet traffic is an urgent problem. The purpose of this paper was to analyze and identify botnet traffic. The experiment extracted 9 features from the real botnet traffic data

used the random forest algorithm as the training model and compared it with 5 other machine learning algorithms. The experimental results show that the proposed model has the best performance under the given evaluation criteria.

关键词

Keywords

references

KANG K S, KIM H S, AHN B J. DDoS attack detection and defense apparatus and method using packet data: US, US8634717[P]. 2014.

BARTHAKUR P, DAHAL M, GHOSE M K. An efficient machine learning based classification scheme for detecting distributed command % control traffic of P2P botnets[J]. International Journal of Modern Education % Computer Science, 2013, DOI: 10.5815/ijmecs.2013.10.02.

STEVANOVIC M, PEDERSEN J M. On the use of machine learning for identifying botnet network traffic[J]. AALOBRG University, 20 16, 4(2): 1-32, DOI: 10. 13052/jcsm2245- 1439.42 1

HOQUE N, BHATTACHARYYA D K, KALITA J K. FFSc: a novel measure for low-rate and high-rate DDoS attack detection using multivariate data analysis[M]. John Wiley % Sons, Inc. 2016.

VENKATESH G K, NADARAJAN R A. HTTP botnet detection using adaptive learning rate multilayer feed-forward neural network[C]// Information Security Theory and Practice. Security, Privacy and Trust in Computing Systems and Ambient Intelligent Ecosystems. Berlin, Heidelberg, Springer, 2012: 38-48.

KOZIK R, CHORAŠ M. Pattern extraction algorithm for netflow-based botnet activities detection[J]. Security % Communication Networks, 20 17: 1- 10. DOI: 10. 1 155/20 17/6047053.

WANG J, PASCHALIDIS I C. Botnet detection based on anomaly and community detection[J]. IEEE Transactions on Control of Network Systems, 2017, 4(2): 392 - 404. DOI: 392

GARCȊA S, GRILL M, STIBOREK J, et al. An empirical comparison of botnet detection methods[J]. Computers % Security, 2014(45):100-123. DOI: 100

方滨兴, 崔翔, 王威.僵尸网络综述[J].计算机研究与发展, 2011, 48(8):1315-1331. DOI: 1315

SAAD S, TRAORE I, GHORBANI A, et al. Detecting P2P botnets through network behavior analysis and machine learning[C]// Ninth International Conference on Privacy, Security and Trust. Montreal, Canada, IEEE, 2011: 174-180.

JIN J, YAN Z, GENG G, et al. Botnet domain name detection based on machine learning[C]// International Conference on Wireless, Mobile and Multi-Media. Beijing, China, IET, 2016.

YAVANOGLU O, AYDOS M. A review on cyber security datasets for machine learning algorithms[C]// IEEE International Conference on Big Data, Symposium on Data Analytics for Advanced Manufacturing. Boston, MA, USA, IEEE, 2017. DOI: 10.1109/BigData.2017.8258167.

诸葛建伟, 韩心慧, 周勇林, 等.僵尸网络研究[J].软件学报, 2008, 19(3):702-715. DOI: 702

LU C, BROOKS R. Botnet traffic detection using hidden markov models[C]// The Workshop on Cyber Security and Information Intelligence Research. USA, Oak Ridge, Tennessee, ACM, 2011: 31.

韦泽鲲, 夏靖波, 张晓燕, 等.基于随机森林的流量多特征提取与分类研究[J].传感器与微系统, 2016, 35(12):55-59. DOI: 55

KATO K, KLYUEV V. Large-scale network packet analysis for intelligent DDoS attack detection development[C]// Internet Technology and Secured Transactions. London, United Kingdom, IEEE, 2015: 360-365.

BHAMARE D, SALMAN T, SAMAKA M, et al. Feasibility of supervised machine learning for cloud security[C]// International Conference on Information Science and Security. Changsha, China, IEEE, 2017: 1-5.

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于SOA_BP神经网络的网络安全态势预测算法研究

一种新的网络安全态势评估方法

基于入侵检测的分布式防火墙的应用研究

AlN/GaN混合缓冲层双异质结p-GaN HEMT直流特性仿真

超低功耗实时时钟电路的设计