P2P Botnet Detection Method Based on Data Flow

摘要

P2P data transmission is the mainstream of network data transmission. P2P botnet malicious data is hidden in normal transmit data, not only difficult to detect but also could cause great harm. This paper presents a method of P2P botnet detection based on data flow, first of all, extract the P2P data stream accurately, and then detect the P2P bots data stream, the small computational complexity does not affect the normal operation of the network. According to the characteristics of the P2P bots data stream, the detection method can detect the existence of the bots before the attack start and filter out illegal data. The experiment results show that this method has good detection efficiency and further maintains the security of the network.