SLINGbot is a system that enables the characterization of present and future botnet threats by allowing researchers to construct benign botnets with varying command and control structures in a controlled, safe, and repeatable manner. It facilitates the creation of simulated botnets using a composable bot framework and scenario driver to direct botnet activities. This allows researchers to generate simulated ground truth for testing botnet detection and mitigation techniques.

1. A System for Live Investigation of Next Generation Botnets Authors: Alden W. Jackson, David Lapsley, Christine Jones… CATCH 2009 Reporter: Jing Chiu Email: D9815023@mail.ntust.edu.tw Data Mining & Machine Learning Lab 04/26/10

7. C&C Feature Space (cont.) Data Mining & Machine Learning Lab 04/26/10

14. Questions? 04/26/10 Data Mining & Machine Learning Lab

15. 04/26/10 Data Mining & Machine Learning Lab

16. 04/26/10 Data Mining & Machine Learning Lab