Combined Forest: a New Supervised Approach for a Machine-Learning-based Botnets Detection - Archive ouverte HAL Access content directly
Conference Papers Year : 2021

Combined Forest: a New Supervised Approach for a Machine-Learning-based Botnets Detection

Abstract

Nowadays, botnet-based attacks are the most prevalent cyber-threats type. It is therefore essential to detect this kind of malware using efficient bots detection techniques. This paper presents our security anomalies detection system, based on a model that we named Combined Forest. Our approach consists of merging some pre-processed Decision Trees to highlight different kinds of botnet by detecting their intrinsic exchanges. Using a supervised data approach, each tree is built from a labelled dataset. In order to achieve this, we aggregate the IP-flows into Traffic-flows to extract key features and avoid over-fitting. Then, we tested different machine learning algorithms and selected the most suitable one. After that, many experiments have been done to determine the best parameters and design the most accurate, adaptative and efficient model.
Fichier principal
Vignette du fichier
Botnets_detection_based-on_ML_algorithms.pdf (715.96 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03502868 , version 1 (26-12-2021)

Identifiers

  • HAL Id : hal-03502868 , version 1

Cite

Christophe Maudoux, Selma Boumerdassi, Alex Barcello, Eric Renault. Combined Forest: a New Supervised Approach for a Machine-Learning-based Botnets Detection. IEEE GLOBECOM, Dec 2021, Madrid, Spain. ⟨hal-03502868⟩
161 View
285 Download

Share

Gmail Facebook X LinkedIn More