The Detection of IRC Botnet Based on Abnormal Behavior

Botnet is one of the major security threats to Internet. In this paper, botnet communication and attack patterns were introduced, and the discovery method of botnet based on abnormal behavior was studied. For the current botnet, mainly based on IRC protocol, an automatic identification system is designed to help analyze and dispose botnet effectively.