Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: BotMosaic: Collaborative Network Watermark for Botnet Detection   Recent research has made great strides in the field of detecting botnets.
However, botnets of all kinds continue to plague the Internet, as many ISPs and
organizations do not deploy these techniques. We aim to mitigate this state by
creating a very low-cost method of detecting infected bot host. Our approach is
to leverage the botnet detection work carried out by some organizations to
easily locate collaborating bots elsewhere. We created BotMosaic as a
countermeasure to IRC-based botnets. BotMosaic relies on captured bot instances
controlled by a watermarker, who inserts a particular pattern into their
network traffic. This pattern can then be detected at a very low cost by client
organizations and the watermark can be tuned to provide acceptable
false-positive rates. A novel feature of the watermark is that it is inserted
collaboratively into the flows of multiple captured bots at once, in order to
ensure the signal is strong enough to be detected. BotMosaic can also be used
to detect stepping stones and to help trace back to the botmaster. It is
content agnostic and can operate on encrypted traffic. We evaluate BotMosaic
using simulations and a testbed deployment.

37
The categories of this paper are: supr-con
7
The categories of this paper are: hep-th
20
The categories of this paper are: acc-phys
16
The categories of this paper are: stat
9
The categories of this paper are: nlin
30
The categories of this paper are: q-alg
0
The categories of this paper are: hep-ph
19
The categories of this paper are: eess
28
The categories of this paper are: alg-geom
25
The categories of this paper are: patt-sol
3
The categories of this paper are: physics
22
The categories of this paper are: chao-dyn
34
The categories of this paper are: chem-ph
32
The categories of this paper are: atom-ph
27
The categories of this paper are: comp-gas
17
The categories of this paper are: q-fin