beta
SniperSpy

Why Keylogger.Org?

Keylogger.Org is a website for people interested in monitoring software, hardware keyloggers and applications. Its domain name appeared at times when the monitoring software and was called ‘keyloggers’, had only the function of keystrokes interception and in most cases was considered to be malicious.

Show More
RSS Feed

News

February 02nd, 2012

All In One Keylogger - Version's update added! All news
HomeArticlesAnomaly-based Botnet Detection for 10 Gb/s Networks

banner-place

Anomaly-based Botnet Detection for 10 Gb/s Networks

by Jonathon W. Donaldson

AUTHORS' DESCRIPTION

Current network data rates have made it increasingly difficult for cyber security specialists to protect the information stored on private systems. Greater throughput not only allows for higher productivity, but also creates a “larger” security hole that may allow numerous malicious applications (e.g. bots) to enter a private network. Software based intrusion detection/prevention systems are not fast enough for the massive amounts of traffic found on 1 Gb/s and 10 Gb/s networks to be fully effective. Consequently, businesses accept more risk and are forced to make a conscious trade-off between threat and performance.

A solution that can handle a much broader view of large-scale, high-speed systems will allow us to increase maximum throughput and network productivity. This paper describes a novel method of solving this problem by joining a pre-existing signature-based intrusion prevention system with an anomaly-based botnet detection algorithm in a hybrid hardware/software implementation.

Our contributions include the addition of an anomaly detection engine to a pre-existing signature detection engine in hardware. This hybrid system is capable of processing full-duplex 10 Gb/s traffic in real-time with no packet loss. The behavior-based algorithm and user interface are customizable. This research has also led to improvements of the vendor supplied signal and programming interface specifications which we have made readily available.




Read the full article
Read the full article
HomeArticlesAnomaly-based Botnet Detection for 10 Gb/s Networks

More about monitoring software

Disclaimer:

Installing computer monitoring tools on computers you do not own or do not have permission to monitor may violate local, state or federal law.

Logging other people's keystrokes or breaking into other people's computer without their permission can be considered illegal by the courts of many countries. The monitoring software reviewed here is ONLY for authorized system administrators and/or owners of computers. We assume no liability and are not responsible for any misuse or damage caused by the keylogging software. The end user of this software is obliged to obey all applicable local, state, federal and other laws in his country of residence.