Abstract
Six years have passed since the appearance of the malicious botnet Mirai targeting IoT devices, but Mirai and its variants still bring about damage worldwide. This paper proposes a new type of cyber security system, called Botnet Defense System (BDS), which uses a self-built botnet to disinfect a malicious botnet. The BDS repeats four steps: 1) Monitor the IoT network and detect a malicious botnet; 2) Plan a strategy for disinfecting the malicious botnet; 3) Build its own botnet according to the strategy; 4) Command and control the self-built botnet that autonomously spreads for disinfection. The heterogeneity of the IoT network may become an obstacle to cyber security. The BDS attempts to overcome the obstacle by utilizing the botnet that spreads autonomously even to unobservable and uncontrollable nodes. The effect was confirmed through modeling and simulation using extended Petri nets. Finally, the future challenges on the BDS were provided.
Supported by JSPS KAKENHI Grant Number JP19K11965.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Antonakakis, M., et al.: Understanding the Mirai Botnet. In: Proceedings of 26th USENIX Security Symposium (SEC), Vancouver, BC, Canada, pp. 1093–1110 (2017)
Kolias, C., Kambourakis, G., Stavrou, A., Voas, J.: DDoS in the IoT: Mirai and other botnets. IEEE Comput. 50(7), 80–84 (2017)
Nakao, K.: Proactive cyber security response by utilizing passive monitoring technologies. In: 2018 IEEE International Conference on Consumer Electronics (ICCE), Las Vegas, NV, US, p. 1 (2018)
Heightened DDoS threat posed by Mirai and other botnets. https://www.us-cert.gov/ncas/alerts/TA16-288A. Accessed 29 Oct 2019
Moffitt, T.: Source Code for Mirai IoT Malware Released. https://www.webroot.com/blog/2016/10/10/source-code-Mirai-iot-malware-released/. Accessed 4 Nov 2019
Yamaguchi, S.: Botnet defense system: concept, design, and basic strategy. Information 11, 516 (2020)
Hiraishi, K.: A Petri-net-based model for the mathematical analysis of multi-agent systems. IEICE Trans. Fund. Electron. Commun. Comput. Sci. E84-A(11), 2829–2837 (2001)
Sinaovi, H., Mrdovic, S.: Analysis of Mirai malicious software. In: Proceedings of the of SoftCOM 2017, Split, Croatia, pp. 1–5 (2017)
Yamaguchi, S., Gupta, B.: Malware threat in internet of things and its mitigation analysis. In: Association, I.R.M. (ed.) Research Anthology on Combating Denial-of-Service Attacks, pp. 371–387. IGI Publishing, Hershey (2021)
A Brief History of the Meris Botnet. https://blog.cloudflare.com/meris-botnet/. Accessed 29 Oct 2021
Bezerra, V.H., da Costa, V.G.T., Barbon, J., Miani, R.S., Zarpelão, B.B.: IoTDS: a one-class classification approach to detect botnets in internet of things devices. Sensors 19(14), 3188 (2019)
Meidan, Y., et al.: N-BaIoT: network-based detection of IoT botnet attacks using deep autoencoders. IEEE Pervasive Comput. 17(3), 12–22 (2018)
Ceron, J.M., Steding-Jessen, K., Hoepers, C., Granville, L.Z., Margi, C.B.: Improving IoT botnet investigation using an adaptive network layer. Sensors 19(3), 727 (2019)
Hadi, H.J., Sajjad, S.M., Nisa, K.U.: BoDMitM: botnet detection and mitigation system for home router base on MUD. In: 2019 International Conference on Frontiers of Information Technology (FIT), Islamabad, Pakistan, pp. 139–1394 (2019)
Gopal, T.S., Meerolla, M., Jyostna, G., Eswari, P.R.L., Magesh, E.: Mitigating mirai malware spreading in IoT environment. In: Proceedings of 2018 International Conference on Advances in Computing, Communications and Informatics (ICACCI), Bangalore, India, pp. 2226–2230 (2018)
Yamaguchi, S., Bin Ahmadon, M.A., Ge, Q.W.: Introduction of petri nets: its applications and security challenges. In: Gupta, B.B., Agrawal, D.P., Yamaguchi, S. (eds.) Handbook of Research on Modern Cryptographic Solutions for Computer and Cyber Security, pp. 145–179. IGI Publishing, Hershey, PA, US (2016)
Nakahori, K., Yamaguchi, S.: A support tool to design IoT services with NuSMV. In: Proceedings of 2017 IEEE International Conference on Consumer Electronics (ICCE), Las Vegas, NV, US , pp. 84–87 (2017)
Edwards S., Profetis, I.: Hajime: analysis of a decentralized internet worm for IoT Devices. https://security.rapiditynetworks.com/publications/2016-10-16/hajime.pdf. Accessed 10 Feb 2019
Molesky, M.J., Cameron, E.A.: Internet of Things: an analysis and proposal of white worm technology. In: Proceedings of 2019 IEEE International Conference on Consumer Electronics (ICCE), Las Vegas, NV, US (2019). 5 pages
Tanaka, H., Yamaguchi, S.: On modeling and simulation of the behavior of IoT devices Malwares Mirai and Hajime. In: Proceedings of 2017 IEEE International Symposium on Consumer Electronics (ISCE), Seri Kembangan, Malaysia, pp. 56–60 (2017)
Linux.Wifatch. https://gitlab.com/rav7teif/linux.wifatch. Accessed 30 Jan 2022
Yamaguchi, S.: White-Hat Worm to Fight Malware and Its Evaluation by Agent-Oriented Petri Nets. Sensors 20, 556 (2020)
Yamaguchi, S.: Botnet defense system: concept and basic strategy. In: Proceedings of 2021 IEEE International Conference on Consumer Electronics (ICCE), Las Vegas, NV, US (2021). 5 pages
Makihara, D., Yamaguchi, S.: A proposal of patrol function by white-hat worm in botnet defense system. In: Proceedings of IEEE International Conference on Consumer Electronics Asia 2021, Gangwon, South Korea, pp. 165–169 (2021)
Ohsaki, K., Yamaguchi, S.: A proposal of heterogeneous white-hat botnet in botnet defense system. In: Proceedings of IEEE International Conference on Consumer Electronics Asia 2021, Gangwon, South Korea, pp. 175–178 (2021)
Pan, X., Yamaguchi, S.: Machine-learning-based white-hat worm launcher in botnet defense system. Int. J. Softw. Sci. Comput. Intell. (in press)
Kageyama, T., Yamaguchi, S.: On tactics to deploy white-hat worms in botnet defense system. In: Proceedings of IEEE Global Conference on Consumer Electronics 2021, Kyoto, Japan, pp. 320–323 (2021)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2022 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Yamaguchi, S. (2022). Research and Development of Botnet Defense System. In: Yamamoto, S., Mori, H. (eds) Human Interface and the Management of Information: Applications in Complex Technological Environments. HCII 2022. Lecture Notes in Computer Science, vol 13306. Springer, Cham. https://doi.org/10.1007/978-3-031-06509-5_30
Download citation
DOI: https://doi.org/10.1007/978-3-031-06509-5_30
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-06508-8
Online ISBN: 978-3-031-06509-5
eBook Packages: Computer ScienceComputer Science (R0)