| This Thesis work discusses various methods to detect Botnets and presents a method to defend from a range of attacks from Bot-herders or Botmasters. "Botnet" is a group of compromised computers connected to a network, which can be used for both recognition and illicit financial gain; controlled by an attacker (bot-herder). Among the counter measures proposed in the recent developments is the "Honeypot". The attacker who would be aware of the Honeypot would take adequate steps to maintain the Botnet, hence attack the Honeypot (Infected Honeypot). We propose a method to remove the infected Honeypot by constructing a P2P structured Botnet which would detect the uninfected Honeypot and use it to detect Botnets originally used by the attacker. Our simulation shows that this method is very effective and can detect the Botnets that are intended to malign the network. |
