J-Botnet Detector: A Java Based Tool for HTTP Botnet Detection

Botnets are collections of compromised computers (Bots) which are remotely controlled by its originator (Bot master) under a common Command and Control framework. In this paper, we are concentrating on HTTP bots. It is more widespread and more difcult to detect compared to all other bots. In the HTTP bots, bot masters use HTTP protocol to hide their activities among the normal web flows and can easily avoid current detection methods like rewalls. Therefore the chance of HTTP attack is increasing day by day. We are proposing a new technique for HTTP botnet detection. As our system is designed in java, it can potentially run on various platforms like MS-Windows and UNIX systems or on any other handheld devices. It also includes a web based monitoring interface which can give alerts about attacks and it can help network administrators to better understand the network traffic and possible attacks.