A Hybrid Association Rule-Based Method to Detect and Classify Botnets

Table 1

Botnet type, number, and name.

Type	Amount	Botnet name
Normal	33	Normal (ISCX + ISOT)
IRC botnet	24	Neris, Rbot, Menti, Murlo, Tbot, IRC ISCX
HTTP botnets	7	Virut, Sogou
P2P botnets	12	NSIS.ay, SMTP Spam, Zeus (C & C), UDP Storm, Zeus, Zero access, Weasel
PS botnets	3	Zeus
Fast-flux botnets	3	Waledac