The Architectural Dynamics of Encapsulated Botnet Detection (EDM)

TL;DR

This paper proposes a high-level architectural framework for detecting and defending against botnets by analyzing IRC tools and implementing proactive, encapsulated defensive mechanisms within network servers.

Contribution

It introduces a novel architectural design for botnet detection that integrates data verification modules and analyzes IRC tools' roles in data exchange.

Findings

Identified enhanced IRC tools (Mpack, ICEpack, Fiesta) involved in botnet data exchange.

Developed a proactive, encapsulated architecture for botnet detection and control.

Proposed architecture improves response time and detection accuracy.

Abstract

Botnet is one of the numerous attacks ravaging the networking environment. Its approach is said to be brutal and dangerous to network infrastructures as well as client systems. Since the introduction of botnet, different design methods have been employed to solve the divergent approach but the method of taking over servers and client systems is unabated. To solve this, we first identify Mpack, ICEpack and Fiesta as enhanced IRC tool. The analysis of its role in data exchange using OSI model was carried out. This further gave the needed proposal to the development of a High level architecture representing the structural mechanism and the defensive mechanism within network server so as to control the botnet trend. Finally, the architecture was designed to respond in a proactive state when scanning and synergizing the double data verification modules in an encapsulation manner within server system.