A hybrid ML-based model for improved detection of IoT botnets

The use of Internet of Things (IoT) devices has experienced an increase since its inception and is expected to continue to do so. However, this growth has also attracted individuals with malicious intentions. Botnet attacks on IoT devices have become more potent each year, exploiting new vulnerabilities and attacking more devices. Therefore, it...

Behind the Botnet: Evaluating Avalanche's security controls using a reconstruction of its anatomy from forensic evidence

How did Avalanche, a botnet with an active lifetime of 8 years while serving 20+ malware families, ensure a smooth operation of business? Avalanche had the attention of security researchers and law enforcement, yet it managed to persevere for a long period of time.<br/>In this work, we answer this question by analyzing Avalanche’s security...

NURSE: eNd-UseR IoT malware detection tool for Smart homEs

IoT devices keep entering our homes with the promise of delivering more services and enhancing user experience; however, these new devices also carry along an alarming number of vulnerabilities and security issues. In most cases, the users of these devices are completely unaware of the security risks that connecting these devices entail. Current...

Honeytrack: Persistent honeypot for the Internet of Things

The number of Internet of Things devices, small low-powered devices with internet connectivity, is undergoing strong growth. As connected devices become the standard, more types of devices are connected to home networks and made accessible from the Internet for convenience. As IoT devices are widely deployed in mass numbers, they can be easily...

PlebNet: A self-replicating botnet for privacy protection

As the amount of digital content being shared is increasing, the need for a privacy protecting and resilient method of file sharing grows. New copyright law proposals are suggesting that governments and corporations are attempting to claim control over the use of the internet. As these new laws may lead to restrictions in digital content sharing...

PlebNet: Botnet for good

Throughout this project two components have been created: Cloudomate and<br/>PlebNet. Cloudomate is a program that can purchase virtual private servers (VPS)<br/>from a number of providers with Bitcoin, it is accessed through a command line<br/>interface and published as Python library. PlebNet is the implementation of an<br/>autonomous self...

Incentivizing botnet mitigation: Towards a reputation measurement system for Internet Service Providers

Cyber-crime is a large problem for society. OftenA botnet is used to for cybercrime. An infected machine is infected with a bot, this bot communicates with its controller. Other machines are infected with the same bot, which communicates with the same controller. These infected machines together form a zombie army of machines: the botnet. It is...

Botnet Mitigation and the Role of ISPs: A quantitative study into the role and incentives of Internet Service Providers in combating botnet propagation and activity