Combined Forest: a New Supervised Approach for a Machine-Learning-based Botnets Detection - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

Combined Forest: a New Supervised Approach for a Machine-Learning-based Botnets Detection

Résumé

Nowadays, botnet-based attacks are the most prevalent cyber-threats type. It is therefore essential to detect this kind of malware using efficient bots detection techniques. This paper presents our security anomalies detection system, based on a model that we named Combined Forest. Our approach consists of merging some pre-processed Decision Trees to highlight different kinds of botnet by detecting their intrinsic exchanges. Using a supervised data approach, each tree is built from a labelled dataset. In order to achieve this, we aggregate the IP-flows into Traffic-flows to extract key features and avoid over-fitting. Then, we tested different machine learning algorithms and selected the most suitable one. After that, many experiments have been done to determine the best parameters and design the most accurate, adaptative and efficient model.
Fichier principal
Vignette du fichier
Botnets_detection_based-on_ML_algorithms.pdf (715.96 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03502868 , version 1 (26-12-2021)

Identifiants

  • HAL Id : hal-03502868 , version 1

Citer

Christophe Maudoux, Selma Boumerdassi, Alex Barcello, Eric Renault. Combined Forest: a New Supervised Approach for a Machine-Learning-based Botnets Detection. IEEE GLOBECOM, Dec 2021, Madrid, Spain. ⟨hal-03502868⟩
161 Consultations
287 Téléchargements

Partager

Gmail Facebook X LinkedIn More