Abstract:ABSTRACT Botnets have emerged as a significant internet security threat, comprising networks of compromised computers under the control of command and control (C&C) servers. These malevolent entities enable a range of malicious activities, from denial of service (DoS) attacks to spam distribution and phishing. Each bot operates as a malicious binary code on vulnerable hosts, granting remote control to attackers who can harness the combined processing power of these compromised hosts for synchronized, highly destructive attacks while maintaining anonymity. This survey explores botnets and their evolution, covering aspects such as their life cycles, C&C models, botnet communication protocols, detection methods, the unique environments botnets operate in, and strategies to evade detection tools. It analyzes research challenges and future directions related to botnets, with a particular focus on evasion and detection techniques, including methods like encryption and the use of covert channels for detection and the reinforcement of botnets. By reviewing existing research, the survey provides a comprehensive overview of botnets, from their origins to their evolving tactics, and evaluates how botnets evade detection and how to counteract their activities. Its primary goal is to inform the research community about the changing landscape of botnets and the challenges in combating these threats, offering guidance on addressing security concerns effectively through the highlighting of evasion and detection methods. The survey concludes by presenting future research directions, including using encryption and covert channels for detection and strategies to strengthen botnets. This aims to guide researchers in developing more robust security measures to combat botnets effectively.

Investigation on the Botnets Activities

Characterizing the IRC-based Botnet Phenomenon

Research on Botnet Mechanisms and Defenses

Research on Key Technologies and Defenses of Botnet

Research and Development of Worm Detection Technologies

Botnets Unveiled: A Comprehensive Survey on Evolving Threats and Defense Strategies

Research of Characteristics of Worm Traffic

Dissecting a Social Botnet: Growth, Content and Influence in Twitter

Detecting Botnet Activities Based on Abnormal DNS traffic

Efficient Detect Scheme of Botnet Command and Control Communication.

A Novel Irc Botnet Detection Method Based On Packet Size Sequence

Towards Situational Awareness of Large-Scale Botnet Probing Events

The New Architecture of P2P-Botnet

Automating Analysis of Large-Scale Botnet Probing Events

The Growing Model of Botnets

Poster: Combine Topology and Traffic to Calibrate P2P Botnet Identification in Large-Scale Network.

Enhanced PeerHunter: Detecting Peer-to-peer Botnets through Network-Flow Level Community Behavior Analysis

Network Forensics Analysis on Email Scam Botnet

AI-Driven Fast and Early Detection of IoT Botnet Threats: A Comprehensive Network Traffic Analysis Approach

Towards Active Measurement for DNS Query Behavior of Botnets

Forensic Model for DDoS Attack