Booter list generation: The basis for investigating DDoS-for-hire websites

José Jair Santanna* (Corresponding Author), Joey de Vries, Ricardo de O. Schmidt, Daphne Tuncer, Lisandro Z. Granville, Aiko Pras

*Corresponding author for this work

    Research output: Contribution to journalSpecial issueAcademicpeer-review

    3 Citations (Scopus)
    631 Downloads (Pure)


    The expansion of Distributed Denial of Service (DDoS)–for-hire websites, known as Booters, has radically modified both the scope and stakes of DDoS attacks. Until recently, however, Booters have only received little attention from the research community. Given their impact, addressing the challenges associated with this phenomenon is crucial. In this paper, we present a rigorous methodology to identify a comprehensive set of existing Booters in the Internet. Before presenting our methodology, we illustrate the benefits of a set of booters on monitoring users from the Dutch NREN, SURFNet, from 2015 to 2017. Our methodology relies on well-defined mechanisms to generate a Booter list, from crawling suspect URLs to characterizing and classifying the collected URLs. The list obtained using the methodology presented in this paper has a classification accuracy of 95.5%, which is 10.5% better compared to previous work.

    Original languageEnglish
    Article numbere2008
    JournalInternational journal of network management
    Issue number1
    Early online date6 Nov 2017
    Publication statusPublished - 1 Jan 2018


    Dive into the research topics of 'Booter list generation: The basis for investigating DDoS-for-hire websites'. Together they form a unique fingerprint.

    Cite this