Analysis of Botnet Domain Names for IoT Cyber Security

Analysis of Botnet Domain Names for IoT Cyber Security

Prof. Sheetal Mungale, Akshata Chokhandre, Prerna Namulwar, Neha Raut, Aparna Meshram

Electronic and Telecommunication Engineering,

S.B Jain Institute of Technology Management and Research,

Nagpur-441501, Maharashtra, India

Abstract

A botnet is a network of take over computers and devices infected with bot malware and remotely controlled by a hacker. The rapid development of the internet of things(IOT) applications the botnet can easily make use to IOT devices for large-scale attacks.Botnets are network of hijacked computer devices use to carry out various scams and cyber attacks.The term “Botnet” is formed from two words robot and network. Robot means an automatic program run and perform the intended task without user interaction.Botnet is a program able to scan any network using Router.Router can identify or scan log (packets) by using malware detection.the IoT devices are always not be installed with sophisticated software to defense the botnet, and on other way, the IoT devices are not always updated in time and then the vulnerabilities or bugs can be easily used by the botnet. generally, the bot or robot generates a series of domain names based on an algorithm and it can dynamically updates the location of C&C(command and Control) server with shifting the active DNS entry.Then the bots can always request the active domain name to access the Command and control server to listen to the command even when the C&C server changed its location.

Keywords: IoT botnet, security machine learning,clustering