The DOI matches its Crossref record; 1 of the 1 references it cites were found in a registry or an index.
Detecting Botnets with Tight Command and Control
Abstract
Systems are attempting to detect botnets by examining traffic content for IRC commands or by setting up honeynets. Our approach for detecting botnets is to examine flow characteristics such as bandwidth, duration, and packet timing looking for evidence of botnet command and control activity. We have constructed an architecture that first eliminates traffic that is unlikely to be a part of a botnet, classifies the remaining traffic into a group that is likely to be part of a botnet, then correlates the likely traffic to find common communications patterns that would suggest the activity of a botnet. Our results show that botnet evidence can be extracted from a traffic trace containing almost 9 million flows
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Roughan, M., Sen, S., Spatscheck, O., & Duffield, N. (2004) · Proceedings of the 4th ACM SIGCOMM conference on Internet measurement · doi:10.1145/1028788.1028805 · Cited by 494
Cited by
Silva, S. S. C., Silva, R. M. P., Pinto, R. C. G., & Salles, R. M. (2013) · Computer Networks · doi:10.1016/j.comnet.2012.07.021 · Cited by 356
Towards effective feature selection in machine learning-based botnet detection approaches
Biglar Beigi, E., Hadian Jazi, H., Stakhanova, N., & Ghorbani, A. A. (2014) · 2014 IEEE Conference on Communications and Network Security · doi:10.1109/cns.2014.6997492 · Cited by 273
Beehive: large-scale log analysis for detecting suspicious activity in enterprise networks
Yen, T.-F., Oprea, A., Onarlioglu, K., Leetham, T., Robertson, W., Juels, A., & Kirda, E. (2013) · Proceedings of the 29th Annual Computer Security Applications Conference · doi:10.1145/2523649.2523670 · Cited by 270
Honeypot trace forensics: the observation viewpoint matters
Pham, V.-H., & Dacier, M. (2011) · Future Generation Computer Systems · doi:10.1016/j.future.2010.06.004 · Cited by 35
Metadata
- Authors
- Strayer, W., Walsh, R., Livadas, C., & Lapsley, D.
- Venue
- Proceedings. 2006 31st IEEE Conference on Local Computer Networks
- Publisher
- IEEE
- Published
- 2006-11
- Pages
- 195-202
- ISSN
- 0742-1303 (ISSN-L)
- OpenAlex
- W2061455058
- Cited by
- 170
- References
- 1
- FWCI
- 9.09
- Type
- conference paper
- Language
- en
- Open access
- closed
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Detecting Botnets with Tight Command and Control. https://app.cochat.ai/papers/10.1109/lcn.2006.322100
- The paper
- Strayer, W., Walsh, R., Livadas, C., & Lapsley, D. (2006). Detecting Botnets with Tight Command and Control. Proceedings. 2006 31st IEEE Conference on Local Computer Networks. https://doi.org/10.1109/lcn.2006.322100
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
