An Efficient Technique to Detect Slow Rate DDoS Attack from Private Tor Network

摘要

A roBOT NETwork is a collection of insecure computers connected via internet. All the activities of insecure computers are controlled by BotMaster. Lately, the BotMaster moved his activities to Tor browser because the secured Tor network makes the detection of Botnet more difficult. The purpose of this paper is to identify Tor based Bot. As the Tor browser is highly secure and doing practical experiment on it is not advisable as it rises ethical issues which could affect the performance and functionality of Tor. Thus, in the proposed system private Tor network (PTN) on physical machines under LAN infrastructure with dedicated resources had been created. The paper shows the detection and deactivation of 'Tor'sHammer' Bot. For detection, delta time (TΔ) is calculated and set the threshold value. For αnormal it is minimum 100 ms and αattack it is less than equal to 10 ms. The TPr is 86.79% and FNr is 13.21%.