Collaborative Life-Cycle-Based Botnet Detection in IoT Using Event Entropy

Collaborative Life-Cycle-Based Botnet Detection in IoT Using Event Entropy

Abdenacer Nafir, Smaine Mazouzi, Salim Chikhi
Copyright: © 2020 |Volume: 10 |Issue: 4 |Pages: 16
ISSN: 1947-9344|EISSN: 1947-9352|EISBN13: 9781799806523|DOI: 10.4018/IJOCI.2020100102
Cite Article Cite Article

MLA

Nafir, Abdenacer, et al. "Collaborative Life-Cycle-Based Botnet Detection in IoT Using Event Entropy." IJOCI vol.10, no.4 2020: pp.19-34. http://doi.org/10.4018/IJOCI.2020100102

APA

Nafir, A., Mazouzi, S., & Chikhi, S. (2020). Collaborative Life-Cycle-Based Botnet Detection in IoT Using Event Entropy. International Journal of Organizational and Collective Intelligence (IJOCI), 10(4), 19-34. http://doi.org/10.4018/IJOCI.2020100102

Chicago

Nafir, Abdenacer, Smaine Mazouzi, and Salim Chikhi. "Collaborative Life-Cycle-Based Botnet Detection in IoT Using Event Entropy," International Journal of Organizational and Collective Intelligence (IJOCI) 10, no.4: 19-34. http://doi.org/10.4018/IJOCI.2020100102

Export Reference

Mendeley
Favorite Full-Issue Download

Abstract

This paper introduces a collaborative and distributed method for botnet detection in massive networks such as internet of things (IoT) and wide area networks (WAN). The method is model-based and designed as a multi-agent system where the agents are situated on IoT devices. Every agent analyzes the events' entropies, then exchanges its decision with its neighbors aiming at establishing global decision if a botnet is ongoing to be installed within the network or not. Decisions spread over the network where a consensual dominant decision can emerge. In previous similar works, it was necessary to use some central hosts in order to compute global decisions. So, scalability is compromised, and the solution is not suited for massive networks such as IoT. The proposed approach does not require any central control, which allows it to be used in IoT and ad hoc networks. Furthermore, the botnet is detected at the early stage of its life-cycle. Conducted experiments have shown that the proposed approach is well suited for botnet detection in IoT and WAN.

Request Access

You do not own this content. Please login to recommend this title to your institution's librarian or purchase it from the IGI Global bookstore.