Parallel botnet detection system by using GPU

Che Lun Hung; Hsiao Hsi Wang

doi:10.1109/ICIS.2014.6912109

Parallel botnet detection system by using GPU

Che Lun Hung, Hsiao Hsi Wang

Providence University Taiwan

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

3 Scopus citations

Abstract

In recent years, botnet is one of the major threats to network security. Many approaches have been proposed to detect botnets by comparing bot features. Usually, these approaches adopt traffic reduction strategy as first step to reduce the flow to following strategies by filtering packets. With the rapid development of network hardware and software the network speed has reached to multi-gigabit. However, analyzing header and payload of every packet consumes huge amount of computational resources and is not suitable for many realistic situations. Although signature-based solutions are accurate, it is not possible to detect bot variants in real-time. In this study, we proposed a GPU-based botnet detection approach. The experimental results show that the network traffic reduction stage on GPU can achieve about 8x times over CPU based botnet detection tool. The proposed algorithm can used to improve the performance of botnet detection tools efficiently.

Original language	English
Title of host publication	2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings
Editors	Yan Han, Wenai Song, Simon Xu, Lichao Chen, Roger Lee
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	65-70
Number of pages	6
ISBN (Electronic)	9781479948604
DOIs	https://doi.org/10.1109/ICIS.2014.6912109
State	Published - 26 09 2014
Externally published	Yes
Event	2014 13th IEEE/ACIS International Conference on Computer and Information Science, ICIS 2014 - Proceedings - Taiyuan, China Duration: 04 06 2014 → 06 06 2014

Publication series

Name	2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings

Conference

Conference	2014 13th IEEE/ACIS International Conference on Computer and Information Science, ICIS 2014 - Proceedings
Country/Territory	China
City	Taiyuan
Period	04/06/14 → 06/06/14

Bibliographical note

Publisher Copyright:
© 2014 IEEE.

Keywords

Bot
Botnet
GPU
Network Security
Parallel Computing
TCP

Access to Document

10.1109/ICIS.2014.6912109

Cite this

Hung, C. L., & Wang, H. H. (2014). Parallel botnet detection system by using GPU. In Y. Han, W. Song, S. Xu, L. Chen, & R. Lee (Eds.), 2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings (pp. 65-70). Article 6912109 (2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICIS.2014.6912109

Hung, Che Lun ; Wang, Hsiao Hsi. / Parallel botnet detection system by using GPU. 2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings. editor / Yan Han ; Wenai Song ; Simon Xu ; Lichao Chen ; Roger Lee. Institute of Electrical and Electronics Engineers Inc., 2014. pp. 65-70 (2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings).

@inproceedings{0053acf9ee0c4885851b50d2da45810c,

title = "Parallel botnet detection system by using GPU",

abstract = "In recent years, botnet is one of the major threats to network security. Many approaches have been proposed to detect botnets by comparing bot features. Usually, these approaches adopt traffic reduction strategy as first step to reduce the flow to following strategies by filtering packets. With the rapid development of network hardware and software the network speed has reached to multi-gigabit. However, analyzing header and payload of every packet consumes huge amount of computational resources and is not suitable for many realistic situations. Although signature-based solutions are accurate, it is not possible to detect bot variants in real-time. In this study, we proposed a GPU-based botnet detection approach. The experimental results show that the network traffic reduction stage on GPU can achieve about 8x times over CPU based botnet detection tool. The proposed algorithm can used to improve the performance of botnet detection tools efficiently.",

keywords = "Bot, Botnet, GPU, Network Security, Parallel Computing, TCP",

author = "Hung, {Che Lun} and Wang, {Hsiao Hsi}",

note = "Publisher Copyright: {\textcopyright} 2014 IEEE.; 2014 13th IEEE/ACIS International Conference on Computer and Information Science, ICIS 2014 - Proceedings ; Conference date: 04-06-2014 Through 06-06-2014",

year = "2014",

month = sep,

day = "26",

doi = "10.1109/ICIS.2014.6912109",

language = "英语",

series = "2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "65--70",

editor = "Yan Han and Wenai Song and Simon Xu and Lichao Chen and Roger Lee",

booktitle = "2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings",

address = "美国",

}

Hung, CL & Wang, HH 2014, Parallel botnet detection system by using GPU. in Y Han, W Song, S Xu, L Chen & R Lee (eds), 2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings., 6912109, 2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings, Institute of Electrical and Electronics Engineers Inc., pp. 65-70, 2014 13th IEEE/ACIS International Conference on Computer and Information Science, ICIS 2014 - Proceedings, Taiyuan, China, 04/06/14. https://doi.org/10.1109/ICIS.2014.6912109

Parallel botnet detection system by using GPU. / Hung, Che Lun; Wang, Hsiao Hsi.
2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings. ed. / Yan Han; Wenai Song; Simon Xu; Lichao Chen; Roger Lee. Institute of Electrical and Electronics Engineers Inc., 2014. p. 65-70 6912109 (2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Parallel botnet detection system by using GPU

AU - Hung, Che Lun

AU - Wang, Hsiao Hsi

PY - 2014/9/26

Y1 - 2014/9/26

N2 - In recent years, botnet is one of the major threats to network security. Many approaches have been proposed to detect botnets by comparing bot features. Usually, these approaches adopt traffic reduction strategy as first step to reduce the flow to following strategies by filtering packets. With the rapid development of network hardware and software the network speed has reached to multi-gigabit. However, analyzing header and payload of every packet consumes huge amount of computational resources and is not suitable for many realistic situations. Although signature-based solutions are accurate, it is not possible to detect bot variants in real-time. In this study, we proposed a GPU-based botnet detection approach. The experimental results show that the network traffic reduction stage on GPU can achieve about 8x times over CPU based botnet detection tool. The proposed algorithm can used to improve the performance of botnet detection tools efficiently.

AB - In recent years, botnet is one of the major threats to network security. Many approaches have been proposed to detect botnets by comparing bot features. Usually, these approaches adopt traffic reduction strategy as first step to reduce the flow to following strategies by filtering packets. With the rapid development of network hardware and software the network speed has reached to multi-gigabit. However, analyzing header and payload of every packet consumes huge amount of computational resources and is not suitable for many realistic situations. Although signature-based solutions are accurate, it is not possible to detect bot variants in real-time. In this study, we proposed a GPU-based botnet detection approach. The experimental results show that the network traffic reduction stage on GPU can achieve about 8x times over CPU based botnet detection tool. The proposed algorithm can used to improve the performance of botnet detection tools efficiently.

KW - Bot

KW - Botnet

KW - GPU

KW - Network Security

KW - Parallel Computing

KW - TCP

UR - http://www.scopus.com/inward/record.url?scp=84936754757&partnerID=8YFLogxK

U2 - 10.1109/ICIS.2014.6912109

DO - 10.1109/ICIS.2014.6912109

M3 - 会议稿件

AN - SCOPUS:84936754757

T3 - 2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings

SP - 65

EP - 70

BT - 2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings

A2 - Han, Yan

A2 - Song, Wenai

A2 - Xu, Simon

A2 - Chen, Lichao

A2 - Lee, Roger

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 2014 13th IEEE/ACIS International Conference on Computer and Information Science, ICIS 2014 - Proceedings

Y2 - 4 June 2014 through 6 June 2014

ER -

Hung CL, Wang HH. Parallel botnet detection system by using GPU. In Han Y, Song W, Xu S, Chen L, Lee R, editors, 2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings. Institute of Electrical and Electronics Engineers Inc. 2014. p. 65-70. 6912109. (2014 IEEE/ACIS 13th International Conference on Computer and Information Science, ICIS 2014 - Proceedings). doi: 10.1109/ICIS.2014.6912109

Parallel botnet detection system by using GPU

Abstract

Publication series

Conference

Bibliographical note

Keywords

Access to Document

Other files and links

Fingerprint

Cite this