Analysis of P2P botnets behaviors in skype application

Mohd Kelana, Anis Farhani (2016) Analysis of P2P botnets behaviors in skype application. Project Report. Universiti Teknikal Malaysia Melaka, Melaka, Malaysia. (Submitted)

Text (Full Text) Analysis of P2P botnets behaviors in skype application.pdf - Submitted Version Download (3MB)

Abstract

Botnets have been recognized as one of the most important threats to the Internet security. They are engaged in DDOS attacks, email spamming and other malicious activities likewise. Traditional botnets usually organized themselves in a hierarchy architecture, which offers professionals opportunities to detect or defend the botnets in their servers. After that, Skype is one of the most used P2P applications on the Internet: VoIP calls, instant messaging, SMS and other features are provided at a low cost to millions of users. Although Skype is a closed source application, an API allows developers to build custom plugins which interact over the Skype network, taking advantage of its reliability and capability to easily bypass firewalls and NAT devices. Since the protocol is completely undocumented, Skype traffic is particularly hard to analyse and to reverse engineer. In this project, focus more on Skype application which is to monitor the normal and abnormal on its network traffic. The case of the "Skype worm" proved to have a high propagation rate, which is spreading almost exponentially during the first days of operation, considering that, as each new person became a victim, all his or her contacts on Skype, Gtalk and other instant messaging systems received these same malicious links.

Actions (login required)

View Item