Detecting Web-Based Botnets Using Bot Communication Traffic Features

<table class="table-group" id="tab7"><tr><td><table class="table"><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr class="thead"><td class="align_left">Approaches</td><td class="align_center">False positive rates of various test datasets</td></tr><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr><td class="align_left">Venkatesh and Nadarajan</td><td class="align_center">Spyeye-1 (0.97%), Spyeye-2 (0.98%), Zeus-1 (0.99%), Zeus-2 (0.96%)</td></tr><tr><td class="align_left">Zhao et al.</td><td class="align_center">BlackEnergy (0%), Weasel (82%)</td></tr><tr><td class="align_left">Cai and Zou</td><td class="align_center">SJTU1 (17.6%), SJTU2 (26.3%), QingPu (13.6%)</td></tr><tr><td class="align_left">WBD</td><td class="align_center">0.42%</td></tr><tr class="table-tr"><td colspan="2"><hr class="tbody-hr"/></td></tr></table></td></tr></table>

Comparison among false positive rates of four similar approaches.

Security and Communication Networks

tab7

Table 7

Table 7: Detecting Web-Based Botnets Using Bot Communication Traffic Features 