Cluster Distribution with Malware Domain Visualization Based on Louvain Algorithm

• Main Authors: MIN-ZE YU, 余旻澤
• Other Authors: Tung-Ming Koo
• Format: Others
• Language: zh-TW
• Published: 2015
• Online Access: http://ndltd.ncl.edu.tw/handle/40969812438100036418

碩士 === 國立雲林科技大學 === 資訊管理系 === 103 === Fast-Flux Service Networks (FFSN) was derived from the technology of Round-Robin DNS. This technique enabled the equal distribution of Internet access to each server to ultimately achieve a balanced server load. FFSN is similar to RR-DNS. However, there is a difference that FFSN hide the domain behind a group agents which is composed of botnets. The clustered of agents might same the attackers or criminal group control. Therefore, when we found the arrangement of cluster of FFSN, we can know the degree of threat. The core of this study focused on using the approach of community detection to find the agents of FFSN quickly. We found the clustered result of Botnet and Fast-flux domain of FFSN while we used Louvain algorithm to detect and analyze community. We can look the arrangement of cluster of FFSN directly by visualizing the network.