BOTNET GROUP DETECTING SYSTEM USING GROUP BEHAVIOR MATRIX BASED ON NETWORK AND BOTNET GROUP DETECTING METHOD USING GROUP BEHAVIOR MATRIX BASED ON NETWORK

摘要

PURPOSE: A botnet group detecting system using group behavior matrix based on a network is provided to detect a botnet group through a mutual similarity analysis about a group which is doubted as a botnet among group information. CONSTITUTION: According to a collecting policy, a traffic information collecting/classifying module captures a packet of a monitoring network. A traffic information management module performs parsing of traffic information. A traffic information transmission module compartmentalizes the parsed traffic information with a transmission header and transmitted-data.