A Survey on Botnets, Issues, Threats, Methods, Detection and Prevention

Abstract

Botnets have become increasingly common and progressively dangerous to both business and domestic networks alike. Due to the Covid-19 pandemic, a large quantity of the population has been performing corporate activities from their homes. This leads to speculation that most computer users and employees working remotely do not have proper defences against botnets, resulting in botnet infection propagating to other devices connected to the target network. Consequently, not only did botnet infection occur within the target user’s machine but also neighbouring devices. The focus of this paper is to review and investigate current state of the art and research works for both methods of infection, such as how a botnet could penetrate a system or network directly or indirectly, and standard detection strategies that had been used in the past. Furthermore, we investigate the capabilities of Artificial Intelligence (AI) to create innovative approaches for botnet detection to enable making predictions as to whether there are botnets present within a network. The paper also discusses methods that threat-actors may be used to infect target devices with botnet code. Machine learning algorithms are examined to determine how they may be used to assist AI-based detection and what advantages and disadvantages they would have to compare the most suitable algorithm businesses could use. Finally, current botnet prevention and countermeasures are discussed to determine how botnets can be prevented from corporate and domestic networks and ensure that future attacks can be prevented.

Dynamic reinforcement learning for network defense: botnet detection and eradication

“…As discussed in the recent report by Owen et al, 10 botnet detection through artificial intelligence and machine learning is very much an area of active research. Recently, Moorthy and Nathiya 11 published a study superficially similar to ours, though their focus was solely on botnet detection and they employed traditional machine learning tools such as decision trees, multi-layer perceptron neural networks, and support vector machines for modeling rather than relying on transformers as we do here.…”

Explainable Artificial Intelligence in CyberSecurity: A Survey

“…However, the most sophisticated Botnets can also alter their behaviour by the Cybersecurity systems of the PCs to evade detection. Most of the time, users are unaware that their devices are part of a Botnet and are under the control of online criminals [183]. hosted on 1,210 distinct networks 10 .…”

An Investigation to Detect Banking Malware Network Communication Traffic Using Machine Learning Techniques

“…As the number of malware and their variants are increasing rapidly and becoming more sophisticated and prevalent [7], additional modern techniques need to be developed to detect these malware variants, and [7] highlights the importance of using AI to detect malware. The authors of [8] also discuss the limitations in other malware detection approaches, such as detecting malicious patterns in executables, and using heuristic-based…”