BotHunter

Last updated

BotHunter is a free utility for Unix, which aims at detecting botnet activity within a network. It does so by analyzing network traffic and comparing it to patterns characteristic of malicious processes. [1] [2] Version 1.7.2 was current as of March 2013. An earlier version ran under Microsoft Windows XP, but was not mentioned on the Web site after the release of 1.7.2. In order to support this application, the developer, SRI International, had collected more than 10,000 samples of malware by 2008. [3]

Unix family of computer operating systems that derive from the original AT&T Unix

Unix is a family of multitasking, multiuser computer operating systems that derive from the original AT&T Unix, development starting in the 1970s at the Bell Labs research center by Ken Thompson, Dennis Ritchie, and others.

Botnet

A botnet is a number of Internet-connected devices, each of which is running one or more bots. Botnets can be used to perform distributed denial-of-service attack, steal data, send spam, and allows the attacker to access the device and its connection. The owner can control the botnet using command and control (C&C) software. The word "botnet" is a combination of the words "robot" and "network". The term is usually used with a negative or malicious connotation.

SRI International United States research institute

SRI International (SRI) is an American nonprofit scientific research institute and organization headquartered in Menlo Park, California. The trustees of Stanford University established SRI in 1946 as a center of innovation to support economic development in the region.

The BotHunter Web site states that the software was made possible in part by a research grant from the U.S. Army Research Office.

Related Research Articles

World Wide Web System of interlinked hypertext documents accessed via the Internet

The World Wide Web (WWW), commonly known as the Web, is an information space where documents and other web resources are identified by Uniform Resource Locators, which may be interlinked by hypertext, and are accessible via the Internet. The resources of the WWW may be accessed by users via a software application called a web browser.

RSS family of web feed formats

RSS is a type of web feed which allows users and applications to access updates to online content in a standardized, computer-readable format. These feeds can, for example, allow a user to keep track of many different websites in a single news aggregator. The news aggregator will automatically check the RSS feed for new content, allowing the content to be automatically passed from website to website or from website to user. This passing of content is called web syndication. Websites usually use RSS feeds to publish frequently updated information, such as blog entries, news headlines, or episodes of audio and video series. RSS is also used to distribute podcasts. An RSS document includes full or summarized text, and metadata, like publishing date and author's name.

Yahoo! Messenger Instant messenging protocol

Yahoo! Messenger was an advertisement-supported instant messaging client and associated protocol provided by Yahoo!. Yahoo Messenger was provided free of charge and could be downloaded and used with a generic "Yahoo ID" which also allowed access to other Yahoo! services, such as Yahoo! Mail. The service also offered VoIP, file transfers, webcam hosting, a text messaging service, and chat rooms in various categories.

Cross-site scripting (XSS) is a type of computer security vulnerability typically found in web applications. XSS enables attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy. Cross-site scripting carried out on websites accounted for roughly 84% of all security vulnerabilities documented by Symantec as of 2007. In 2017, XSS is still considered a major threat vector. XSS effects vary in range from petty nuisance to significant security risk, depending on the sensitivity of the data handled by the vulnerable site and the nature of any security mitigation implemented by the site's owner.

Credo Reference or Credo is an American company that offers online reference content by subscription and partners with libraries to develop information-literacy programs or produce library marketing plans and materials. Founded in 1999, Credo Reference provides full-text online versions of over 3,500 published reference works from more than 100 publishers in a variety of major subjects. These include general and subject dictionaries as well as encyclopedias. The company's customers are libraries, library systems, k-12 schools, and universities, which subscribe to the service for their patrons' use.

Morpheus was a file sharing and searching peer-to-peer client for Microsoft Windows, developed and distributed by the company StreamCast, that originally used the Opennap protocol, but later supported many different peer-to-peer protocols. On April 22, 2008, distributor StreamCast Networks filed for Chapter 7 bankruptcy after a long legal battle with music companies; all of their employees were laid off and the official download at www.morpheus.com stopped being available, though for a small period the website remained online. As of October 29, 2008, the official Morpheus website is offline, including all other websites owned by StreamCast Networks, specifically MusicCity.com, Streamcastnetworks.com and NeoNetwork.com.

In computing, a user agent is software that is acting on behalf of a user. One common use of the term refers to a web browser that "retrieves, renders and facilitates end user interaction with Web content".

Arc System Works Japanese video game developer

Arc System Works Co., Ltd. is a video game developer and publisher based in Yokohama, Japan. Founded by Minoru Kidooka in 1988, Arc System Works is known for its arcade 2D fighting game franchises, Guilty Gear and BlazBlue, as well as other licensed-based fighting games from Shueisha/Shonen Jump's Dragon Ball and Atlus's Persona 4 Arena.

Canoe.com is an English-language Canadian portal site and website network, and is a subsidiary of Postmedia Network. The French-language version continues to use the former name for both sites, Canoe.ca, and is owned by Quebecor Media. The phrase Canadian Online Explorer appears in the header of the English version of the site; the name is also evidently a play on words on canoe. Canoe's head office is in Toronto at 333 King Street East.

The following tables compare general and technical information for a number of available applications supporting the eDonkey network.

BotSeer was a Web-based information system and search tool used for research on Web robots and trends in Robot Exclusion Protocol deployment and adherence. It was created and designed by Yang Sun, Isaac G. Councill, Ziming Zhuang and C. Lee Giles. BotSeer is now inactive; the original URL was https://web.archive.org/web/20100208214818/http://botseer.ist.psu.edu/

In computing, version targeting is a technique that allows a group of users to use some advanced software features that were introduced in a particular software version while allowing users accustomed to the prior versions to still use the same software as if the new features were never added to the software. It is a way to ensure backward compatibility when new software features would otherwise break it.

Mendeley social reference management software

Mendeley is a desktop and web program produced by Elsevier for managing and sharing research papers, discovering research data and collaborating online. It combines Mendeley Desktop, a PDF and reference management application available for Windows, macOS and Linux. It also provides Mendeley for Android and iOS, with Mendeley Web, an online social network for researchers.

Web Services Description Language file format

The Web Services Description Language is an XML-based interface description language that is used for describing the functionality offered by a web service. The acronym is also used for any specific WSDL description of a web service, which provides a machine-readable description of how the service can be called, what parameters it expects, and what data structures it returns. Therefore, its purpose is roughly similar to that of a type signature in a programming language.

SPDY is a deprecated open-specification networking protocol that was developed primarily at Google for transporting web content. SPDY manipulates HTTP traffic, with particular goals of reducing web page load latency and improving web security. SPDY achieves reduced latency through compression, multiplexing, and prioritization, although this depends on a combination of network and website deployment conditions. The name "SPDY" is a trademark of Google and is not an acronym.

Neubot is a free software Internet bot, developed and maintained by the Nexa Center for Internet and Society, that gathers network performance data useful to investigate network neutrality.

Freerice click-to-donate site associated with the World Food Programme

Freerice is an ad-supported, free-to-play website that allows players to donate to charities by playing multiple-choice quiz games. For every question the user answers correctly, 10 grains of rice are donated via the World Food Programme. The available subjects include English vocabulary, multiplication tables, pre-algebra, chemical symbols, English grammar, SAT, foreign language vocabulary for English speakers, human anatomy, geography, the identification of famous artwork, literature, quotations, and world hunger. A user's total score is displayed as a mound of rice and the number of grains.

References