DEVICE AND METHOD DETECTING MEMBERS OF P2P BOTNETS USING PROBABILISTIC DYE-PUMPING ALGORITHM

摘要

An apparatus and a method for detecting a P2P botnet member by using a probabilistic dye-pumping algorithm are disclosed. A controller calculates an internal network node and an interconnected node, calculates a probability of a traffic between the internal network node and the interconnecting node to be a botnet traffic, calculates a probabilistic dye absorption coefficient to infer a P2P connection possibility by using the calculated probability, and calculates a dye level, which shows a rank of the P2P connection probability, by using the calculated dye absorption coefficient. A storage part stores at least one among the probability, probabilistic dye absorption coefficient, and the dye level.