Zero Botnets: An Observe-Pursue-Counter Approach

Kepner, Jeremy; Bernays, Jonathan; Buckley, Stephen M.; Cho, Kenjiro; Conrad, Cary; Daigle, Leslie; Erhardt, Keeley; Gadepally, Vijay; Greene, Barry R.; Jones, Michael; Knake, Robert K.; Maggs, Bruce M.; Michaleas, Peter; Meiners, Chad R.; Morris, Andrew M.; Pentland, Alex; Pisharody, Sandeep; Powazek, Sarah; Prout, Andrew; Reiner, Philip; Suzuki, Koichi; Takahashi, Kazuhiko; Tauber, Tony; Walker, Leah; Stetson, Douglas

doi:10.48550/arxiv.2201.06068

Cited by 1 publication

(2 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, it has a drawback where the white-hat botnet is not responsive enough when cleaning up the network. This is because the concept of observe-pursue-counter approach proposed by Kepner et al [ 25 ] was not taken into consideration. To achieve ’zero-botnet’ we need responsive white-hat botnets that can become stronger when they need to attack and withdraw once they recovered a territory.…”

Section: Discussionmentioning

confidence: 99%

See 1 more Smart Citation

Diffusion of White-Hat Botnet Using Lifespan with Controllable Ripple Effect for Malware Removal in IoT Networks

Ahmadon

Yamaguchi

2023

Sensors

View full text Add to dashboard Cite

Self-propagating malware has been infecting thousands of IoT devices and causing security breaches worldwide. Mitigating and cleaning self-propagating malware is important but challenging because they propagate unpredictably. White-hat botnets have been used to combat self-propagating malware with the concept of fight fire-with-fire. However, white-hat botnets can also overpopulate and consume the resource of IoT devices. Later, lifespan was introduced as a self-destruct measure to restrain white-hat botnets’ overpopulation, but unable to change based on real-time situations. This paper proposes a method for diffusing white-hat botnets by controlling lifespan. The main contribution of this paper is that the method uses a dynamic lifespan that increases and decreases based on the congregation’s situation of the self-propagating malware and white-hat botnets. The method tackles the problem of overpopulation of white-hat botnets since they can self-propagate by controlling the ripple effect that widens the white-hat botnet’s diffusion area but suppresses the number of white-hat botnets to achieve a ’zero-botnet’ situation. The effectiveness in reducing the overpopulation rate was confirmed. The experiment result showed that the ripple effect could reduce the number of white-hat botnets in the network by around 80%, depending on different control parameters.

show abstract

Section: Discussionmentioning

confidence: 99%

“…Then, in 2022, the idea is supported by Kepner et al. [ 25 ]. They stated that botnets are usually cleansed long after the initial infection.…”

Section: Related Workmentioning

confidence: 99%