A host-based framework for RAT bots detection
Ahmed A. Awad, Samir G. Sayed, Sameh A. Salem · 2017
Cyber threats push the researchers towards developing detection frameworks for protecting Internet users. Remote administration tool (RAT) is one of the serious cyber tools used by the attackers to fully control the targeted victim machine. In this paper a host based detection framework is introduced for RAT detection. The proposed framework depends on fully analysis of the system behavior of the host machine for the detection of RAT bots using machine learning techniques. The proposed framework provides a detection accuracy of 95.23% with low false positive rates.