Research Article

Smart Approach for Botnet Detection Based on Network Traffic Analysis

Table 1

Properties used to detect attacks.

FeatureAssigned value type

#In packetNumber
#Out packetNumber
#Packet/timeNumber
Ration (in/out) packetsNumber
#Bytes in a packetNumber
Complete connectionBool
#Complete connectionNumber
#Packet received of the same IPNumber
#Same size received packetsNumber
SYN packets/TCP packetsNumber