Botnet Defense System: Concept and Basic Strategy

This paper proposes a new kind of cybersecurity systems, named Botnet Defense System (BDS), which defends a network system against malicious botnets. The unique feature is that a BDS uses white-hat botnets to fight malicious botnets. The BDS monitors a network system. If detecting malicious botnets, it launches white-hat worms and constructs white-hat botnets in order to destroy the malicious botnets. A basic strategy is also proposed. The primary factor is the secondary infectivity of the white-hat worms. If it is high, the BDS only has to launch a few white-hat worms. Otherwise, it should launch as many white-hat worms as possible. The validity of the strategy was confirmed through simulation with agent-oriented Petri nets.