تشخیص بات‌نت‌ها با استفاده از فنون یادگیری عمیق

نوع مقاله : مقاله پژوهشی

نویسندگان

1 دانشجوی کارشناسی ارشد، دانشگاه شهید باهنر کرمان، کرمان، ایران

2 دانشیار، دانشگاه شهید باهنر کرمان، کرمان، ایران

3 استادیار، دانشگاه شهید باهنر کرمان، کرمان، ایران

چکیده

امروزه به دلیل اتصال تلفن‌های همراه هوشمند به اینترنت و وجود قابلیت‌ها و امکانات مختلف در این تلفن‌ها، حفظ امنیت این دستگاه‌ها به یک چالش مهم تبدیل شده است. چرا که معمولا در این دستگاه‌ها انواع داده‌های خصوصی که مرتبط با حریم شخصی افراد است ثبت و ذخیره می‌شود. در سال‌های اخیر این دستگاه‌ها مورد هدف یکی از خطرناک‌ترین حملات سایبری قرار گرفته‌اند که بات‌نت نام دارد. بات‌نت‌ها توانایی انجام عملیات مخربی چون ربودن و استراق سمع و حملات انکار سرویس را دارند. از این‌رو شناسایی به موقع بات‌نت‌ها تاثیر زیادی در حفظ امنیت تلفن‌های همراه دارد. در این مقاله روشی جدید برای شناسایی بات‌نت‌ها از برنامه‌های سالم اندروید و همچنین تشخیص نوع بات‌نت از میان 14 نوع مختلف از خانواده بات‌نت‌ها ارائه شده است. در این روش ابتدا با استفاده از مهندسی معکوس، لیست مجوزهای برنامه استخراج شده، سپس بر اساس این لیست مجوز‌ها تصویر معادل برنامه ایجاد می‌شود. به این ترتیب مجموعه‌ای از تصاویر بدست می‌آید که با استفاده از شبکه عصبی کانولوشنال ارائه شده، این تصاویر طبقه‌بندی و نوع برنامه کاربردی مشخص می‌شود. نتایج حاصل از مقایسه و ارزیابی این روش با روش‌های سنتی یادگیری ماشین چون ماشین بردار پشتیبان و درخت تصمیم نشان داد که روش ارائه شده کارایی بالاتری در تشخیص انواع بات‌نت‌ها و جداسازی آن از برنامه‌‌های سالم دارد

کلیدواژه‌ها

عنوان مقاله [English]

Mobile botnets detection using deep learning techniques

نویسندگان [English]

  • Maryam Ghanavati Nasab 1
  • Mahdieh Ghazvini 2
  • Fahimeh Ghasemian 3
1 Master's student, Shahid Bahonar University of Kerman, Kerman, Iran
2 Associate Professor, Shahid Bahonar University of Kerman, Kerman, Iran
3 Assistant Professor, Shahid Bahonar University of Kerman, Kerman, Iran
چکیده [English]

Smartphones are now well integrated with advanced capabilities and technologies such as the Internet. Today, due to the facilities and capabilities and the widespread use of smart mobile devices, mobile security has become a vital issue worldwide. Smartphones are not properly protected compared to computers and computer networks, and users do not consider security updates. Recently, mobile devices and networks have been targeted by one of the most dangerous cyber threats known as botnets. Mobile Bantent An enhanced example of Boutons has the ability to perform malicious operations such as denial of service attacks, data theft, eavesdropping, and more. Bunters use three communication protocols: HTTP, SMS and Bluetooth to communicate with each other; So when users are not connected to the Internet, botnets are able to communicate with each other. In this study, to identify mobile batonet from 14 Android baton families, including 1932 samples of Android mobile devices applications and 4304 samples of safe and secure Android mobile devices applications have been used. Application permissions were extracted for reverse engineering to automatically classify and detect types of botnets, then based on these permissions, each application was converted to an equivalent image using the proposed method. Labeled images were then used to train convolutional neural networks. The results of evaluation and comparison of this method with classical methods including backup vector machine and decision tree showed that the proposed method is able to achieve higher efficiency in detecting different types of botnets and separating it from healthy programs

کلیدواژه‌ها [English]

  • Botnet
  • mobile security
  • security
  • mobile botnet
  • botnet detection
  • convolutional network

Smiley face

مراجع

[1]    M. La Polla, F. Martinelli, and D. Sgandurra, "A survey on security for mobile devices," IEEE communications surveys & tutorials, vol. 15, no. 1, pp. 446-471, 2012.
[2]    Y. Zeng, K. G. Shin, and X. Hu, "Design of SMS commanded-and-controlled and P2P-structured mobile botnets," in Proceedings of the fifth ACM conference on Security and Privacy in Wireless and Mobile Networks, 2012, pp. 137-148.
[3]    A. Ezzatneshan, S. Kamel Tabbakh Farizani, M. Kheirabadi, and R. Ghaemi, "Providing a new solution to botnet detection in a Markov chain-based network," Electronic and Cyber Defense, vol. 9, no. 3, pp. 59-71, 2021.(in Persian)
[4]    H. Akbari and S. Safavi, "Estimate botnet using vicarious servers in distributed denial of service attacks," Journal of Electronical & Cyber Defence, pp. 95-109.(in Persian)
[5]    A. Flo and A. Josang, "Consequences of botnets spreading to mobile devices," in Short-Paper Proceedings of the 14th Nordic Conference on Secure IT Systems (NordSec 2009), 2009, pp. 37-43: Citeseer.
[6]    N. Sakthipriya, V. Govindasamy, and V. Akila, "Review of Deep Learning Approaches for IoT Botnet Detection," in Proceedings of International Conference on Communication and Computational Technologies, 2023, pp. 521-533: Springer.
[7]    M. Gopinath and S. C. Sethuraman, "A comprehensive survey on deep learning based malware detection techniques," Computer Science Review, vol. 47, p. 100529, 2023.
[8]    S. Hamzenejadi, M. Ghazvini, and S. Hosseini, "Mobile botnet detection: a comprehensive survey," International Journal of Information Security, pp. 1-39, 2022.
[9]    M. Moodi, M. Ghazvini, and H. Moodi, "A hybrid intelligent approach to detect android botnet using smart self-adaptive learning-based PSO-SVM," Knowledge-Based Systems, vol. 222, p. 106988, 2021.
[10] X. Meng and G. Spanoudakis, "MBotCS: A mobile botnet detection system based on machine learning," in International Conference on Risks and Security of Internet and Systems, 2015, pp. 274-291: Springer.
[11] Z. Abdullah, M. M. Saudi, and N. B. Anuar, "ABC: android botnet classification using feature selection and classification algorithms," Advanced Science Letters, vol. 23, no. 5, pp. 4717-4720, 2017.
[12] C. Tansettanakorn, S. Thongprasit, S. Thamkongka, and V. Visoottiviseth, "ABIS: a prototype of android botnet identification system," in 2016 Fifth ICT International Student Project Conference (ICT-ISPC), 2016, pp. 1-5: IEEE.
[13] S. Anwar, J. M. Zain, Z. Inayat, R. U. Haq, A. Karim, and A. N. Jabir, "A static approach towards mobile botnet detection," in 2016 3rd International Conference on Electronic Design (ICED), 2016, pp. 563-567: IEEE.
[14] J. f. Alqatawna and H. Faris, "Toward a detection framework for android botnet," in 2017 International Conference on New Trends in Computing Sciences (ICTCS), 2017, pp. 197-202: IEEE.
[15] S. Hojjatinia, S. Hamzenejadi, and H. Mohseni, "Android botnet detection using convolutional neural networks," in 2020 28th Iranian Conference on Electrical Engineering (ICEE), 2020, pp. 1-6: IEEE.
[16] S. Y. Yerima and M. K. Alzaylaee, "Mobile botnet detection: a deep learning approach using convolutional neural networks," in 2020 International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA), 2020, pp. 1-8: IEEE.
[17] S. Y. Yerima and Y. To, "A deep learning-enhanced botnet detection system based on Android manifest text mining," in 2022 10th International Symposium on Digital Forensics and Security (ISDFS), 2022, pp. 1-6: IEEE.
[18] S. Balasunthar and Z. Abdullah, "Comparison of Convolutional Neural Network and Artificial Neural Network for Android Botnet Attack Detection," Applied Information Technology And Computer Science, vol. 3, no. 2, pp. 32-49, 2022.
[19] M. Faghihniya, R. Jalaei, and H. Shojaee Yas, "Kavosh: Offering an Analysis Method and the Impact of Normal Network Traffic on Selection and Extraction Based on the Minkowski Distance," Electronic and Cyber Defense, vol. 9, no. 1, pp. 137-147, 2021.(in Persian)
[20] A. M. Almuhaideb and D. Y. Alynanbaawi, "Applications of artificial intelligence to detect android botnets: A Survey," IEEE Access, vol. 10, pp. 71737-71748, 2022.
[21] R. Mishra and S. K. Jha, "Survey on Botnet Detection Techniques," in Internet of Things and Its Applications: Springer, 2022, pp. 441-449.
پدافند الکترونیکی و سایبری
دوره 11، شماره 2 - شماره پیاپی 42
شماره پیاپی 42، فصلنامه تابستان
تیر 1402
صفحه 31-43

فایل ها

سابقه مقاله

  • تاریخ دریافت: 22 خرداد 1401
  • تاریخ بازنگری: 30 دی 1401
  • تاریخ پذیرش: 27 اردیبهشت 1402
  • تاریخ انتشار: 01 تیر 1402

هم رسانی

ارجاع به این مقاله

آمار