Next-Generation Botnet Detection and Response

摘要

In this project, we developed dynamic DNS monitoring heuristics to identify domains used for botnet command and control, as well as anomaly detection algorithms for Recursive DNS servers at ISPs and enterprise networks to detect botnet command and control activities. We also developed botnet detection systems for enterprise networks. These systems include BotHunter, BotSniffer, BotMiner, and BotProbe. We formed a start-up company Damballa, Inc. to deliver anti-botnet technologies to government and enterprise customers.