A Hybrid Association Rule-Based Method to Detect and Classify Botnets

<table class="table-group" id="tab7"><tr><td><table class="table"><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr class="thead"><td class="align_left">Category</td><td class="align_center">Description</td></tr><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr><td class="align_left" rowspan="2">Number of nodes</td><td class="align_center">Number of IP addresses</td></tr><tr><td class="align_center">Number of FQDN</td></tr><tr><td class="align_left">Node degree</td><td class="align_center">Maximum and average degrees of FQDN nodes</td></tr><tr><td class="align_left">Betweenness</td><td class="align_center">Betweenness FQDN node's largest IP node intermediary centrality</td></tr><tr class="table-tr"><td colspan="2"><hr class="tbody-hr"/></td></tr></table></td></tr></table>

<div>Selection of global correlation features.</div>

Security and Communication Networks

tab7

Table 7

Table 7: A Hybrid Association Rule-Based Method to Detect and Classify Botnets 