Fig 1.
C&C architecture of the proposed P2P botnet model.
Fig 2.
The process of downstream communication.
Fig 3.
The process of upstream communication.
Fig 4.
The disguised Version Handshake.
Table 1.
The definition of network properties.
Table 2.
Properties of the constructed P2P botnet.
Fig 5.
The distribution of the current number of sensor bots in peer lists.
Fig 6.
A network overview of the simulated botnet.
Fig 7.
A network overview of the pre-constructed P2P botnet deployed on cloud platforms.
Fig 8.
The data structure of the upstream message.
Table 3.
Peak value and max value of the path length from a regular bot to a sensor bot under different pr.
Fig 9.
Comparison of the Eq (7) and simulation results with different TTLup.
Fig 10.
Performance of BFS (a), DFS (b) and LICA (c) on different anti-crawling strategies (Sreturn = 4, M = 20).
Fig 11.
Performance of Random (a) and ZeusMilker (b) on different anti-crawling strategies (Sreturn = 4, M = 20).
Fig 12.
The network traffic of (a) running the Bitcoin Core client and (b) DUSTBot in the same network environment within 15 minutes.