The Generation of Booter (black)lists
J. de Vries · 2015
Distributed Denial-of-Service (DDoS) attacks have been a very effective tool for skilled attackers to disrupt online services. In recent years a new phenomenon appeared that offers similar attack capabilities to unskilled users at the press of a button. These so called Booter websites that offer DDoS-as-a-service allow anyone to execute attacks for less than USD 5. Previous research tried to mitigate these growing concerns by dynamically generating a blacklist to prevent (or warn) the average unskilled user from getting access. Our research aims to improve the blacklist generation. A more extensive web crawler is developed to find potential online Booters from Google search engine and other sources not indexed by Google (such as black-market forums and online video-platforms). We additionally develop a more accurate Booter classifier that is improved upon with a machine learning algorithm. Finally, we update the Booter (black)list on a daily basis to give the most accurate information about Booters to security specialists and interested researchers.