A protocol analyse based IRC botnet detection method
Minghui Zhang · Microcomputer Information · 2010
The application of IRC protocol makes the detection of botnet difficult. According to studying the mechanism of IRC botnet operating,an IRC botnet detection method based on protocol analysis is proposed (BotDetector for short). With the technology of traffic preprocess,IRC protocol analysis,and control command pattern match,BotDetector realizes a real-time botnet detection platform. The experiment shows that the method of BotDetector is effective.