A Survey on Botnets: Incentives, Evolution, Detection and Current Trends

Vu, Simon Nam Thanh; Stege, Mads; El-Habr, Peter Issam; Bang, Jesper; Dragoni, Nicola

doi:10.3390/fi13080198

Cited by 27 publications

(7 citation statements)

References 228 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Thanh et al [ 13 ] have conducted one of the most comprehensive literature reviews in this field in recent years. The survey conducts a detailed literature research, and with 234 references, it has performed quite a deep analysis of the research field.…”

Section: Related Workmentioning

confidence: 99%

Systematic Literature Review of IoT Botnet DDOS Attacks and Evaluation of Detection Techniques

Gelgi,

Guan,

Arunachala

et al. 2024

Sensors

Self Cite

View full text Add to dashboard Cite

Internet of Things (IoT) technology has become an inevitable part of our daily lives. With the increase in usage of IoT Devices, manufacturers continuously develop IoT technology. However, the security of IoT devices is left behind in those developments due to cost, size, and computational power limitations. Since these IoT devices are connected to the Internet and have low security levels, one of the main risks of these devices is being compromised by malicious malware and becoming part of IoT botnets. IoT botnets are used for launching different types of large-scale attacks including Distributed Denial-of-Service (DDoS) attacks. These attacks are continuously evolving, and researchers have conducted numerous analyses and studies in this area to narrow security vulnerabilities. This paper systematically reviews the prominent literature on IoT botnet DDoS attacks and detection techniques. Architecture IoT botnet DDoS attacks, evaluations of those attacks, and systematically categorized detection techniques are discussed in detail. The paper presents current threats and detection techniques, and some open research questions are recommended for future studies in this field.

show abstract

Section: Related Workmentioning

confidence: 99%

Systematic Literature Review of IoT Botnet DDOS Attacks and Evaluation of Detection Techniques

Gelgi,

Guan,

Arunachala

et al. 2024

Sensors

Self Cite

View full text Add to dashboard Cite

show abstract

“…The types and attack patterns of botnets constantly change, due to a large increase since 2016 in IoT devices which have enough processing power to be part of a botnet [77]. Botnets are most commonly used for DDoS attacks, but the infrastructure has also been used to spread phishing and malware [78], like for example the Emotet botnet.…”

Section: Development Tools and Infrastructure In Cybercrime Ecosystemmentioning

confidence: 99%

COORDINATE: A model to analyse the benefits and costs of coordinating cybercrime

Meurs¹

2022

JISIS

View full text Add to dashboard Cite

Recent leaks (such as Conti) have provided greater insights on the working of cybercriminal organisations. Just like any other business, these malicious actors strategically manage their processes in order to maximise their revenues. Coordinating different types of cybercrimes as part of a single attack campaign provides another opportunity to these criminal groups to improve the efficiency of their attacks. To investigate the promise of this “coordination” between cybercrimes in improving the financial gains realised by cybercriminals, we take a two-step approach. First, we perform a bibliometric analysis of past scientific literature discussing the concept of “coordination” w.r.t to cybercrime. Second, as a case study, analysing the attack chains of DDoS, phishing and ransomware attacks, we identify vantage points for potential coordination from an attacker’s perspective. Based on our findings, we propose a model (COORDINATE) to identify the types of potential cybercrime “coordinations”. COORDINATE considers three relevant types of coordination: direct collaborated coordination, indirect collaborated coordination, and opportunistic coordination. Given the advantages of coordinated attacks, our results suggest that one crime may provide opportunities for the next one. Coordinated attacks will become more prevalent, and that we may witness the development of a dynamic that leads to more online crime.

show abstract

“…Several countermeasure techniques have been proposed against botnet threats [ 8 ]. These can be broadly classified into three categories: detection, mitigation and spread prevention (see Figure 1 and Table 1 ).…”

Section: Related Workmentioning

confidence: 99%

Botnet Defense System: Observability, Controllability, and Basic Command and Control Strategy

Yamaguchi

2022

Sensors

View full text Add to dashboard Cite

This paper deals with the observability, controllability, and command and control strategy in the Botnet Defense System (BDS) that disinfects malicious botnets with white-hat botnets. The BDS defends an IoT system built over the Internet. The Internet is characterized by openness, but not all nodes are observable and controllable. We incorporated the concept of observability and controllability into the BDS design and theoretically clarified that the BDS can enhance its observability and controllability by utilizing its white-hat botnets. In addition, we proposed a Withdrawal strategy as a basic strategy to command and control white-hat botnets. Then, we modeled the BDS, adopted the Withdrawal strategy with agent-oriented Petri net PN2 and confirmed the effect through the simulation of the model. The result shows that even if considering observability and controllability, the BDS wiped out the malicious bots and reduced the white-hat bots to less than 1% as long as the white-hat worms were sufficiently infectious.

show abstract

A Survey on Botnets: Incentives, Evolution, Detection and Current Trends

Cited by 27 publications

References 228 publications

Systematic Literature Review of IoT Botnet DDOS Attacks and Evaluation of Detection Techniques

Systematic Literature Review of IoT Botnet DDOS Attacks and Evaluation of Detection Techniques

COORDINATE: A model to analyse the benefits and costs of coordinating cybercrime

Botnet Defense System: Observability, Controllability, and Basic Command and Control Strategy

Contact Info

Product

Resources

About