Botnet Detection and Response Architecture for Offering Secure Internet Services

摘要

Countermeasures against botnet, which has been recognized as the Internet’s biggest threat, are urgently needed to create a safe Internet environment.  However, the current technology lags behind the evolution of botnet, and, unlike in the past, mutual cooperation among ISPs and countries is essential. As botnet is distributed internationally rather than in a particular ISP domain, international cooperation is needed. As such, this paper proposes a framework for the systematic detection and prevention of botnet, as well as a procedure and method for cooperation.