Booter list generation: The basis for investigating DDoS-for-hire websites

José Jair Santanna* (Corresponding Author), Joey de Vries, Ricardo de O. Schmidt, Daphne Tuncer, Lisandro Z. Granville, Aiko Pras

*Corresponding author for this work

    Research output: Contribution to journalSpecial issueAcademicpeer-review

    2 Citations (Scopus)
    31 Downloads (Pure)

    Abstract

    The expansion of Distributed Denial of Service (DDoS)–for-hire websites, known as Booters, has radically modified both the scope and stakes of DDoS attacks. Until recently, however, Booters have only received little attention from the research community. Given their impact, addressing the challenges associated with this phenomenon is crucial. In this paper, we present a rigorous methodology to identify a comprehensive set of existing Booters in the Internet. Before presenting our methodology, we illustrate the benefits of a set of booters on monitoring users from the Dutch NREN, SURFNet, from 2015 to 2017. Our methodology relies on well-defined mechanisms to generate a Booter list, from crawling suspect URLs to characterizing and classifying the collected URLs. The list obtained using the methodology presented in this paper has a classification accuracy of 95.5%, which is 10.5% better compared to previous work.

    Original languageEnglish
    Article numbere2008
    JournalInternational journal of network management
    Volume28
    Issue number1
    Early online date6 Nov 2017
    DOIs
    Publication statusPublished - 1 Jan 2018

      Fingerprint

    Cite this