- Botnet Detection in the Core
- BITSI (Biologically Inspired Tactical Security Infrastructure)
- Defenses Against Botnet-Aided Spam over VoIP
- Botnet Activity Detection Based Upon an Analogy to the RNAi Immune System
- Intel's DDI (Distributed Detection and Inference) Research Program
- Orchids
- Phalanx
- Conclusion
Botnet Activity Detection Based Upon an Analogy to the RNAi Immune System
Dr. Sanjay Goel of the New York State Center for Information Forensics and Assurance, University at Albany, SUNY, has been experimenting with models of biological immune systems that he says are “supported by a strong math model basis.” A problem with using these models, he says, is that network security techniques based upon them have spent “15 years in the idea stage” without achieving enough to become commercialized.
“Now we propose another model: RNA interference (RNAi), which is a biological process which defends against virus spoofing to protect the genome by shutting down the expression of specific genes.”
He and a colleague analyzed the results using a system of differential equations based upon the RNAi model and easily detected a Bomba 1.2 botnet attack.