Detection methods research of half distributed P2P Botnet
半分布式P2P Botnet的检测方法研究*

Recently, Botnet is already to be one of great threats in network security, which appeared in the past is mostly based on IRC mechanism, and the detecting methods are also mostly for this type. With the extensive use of P2P technology, half distributed peer-to-peer(P2P) Botnet has already become one kind of new network attacks. Due to spreading widely of servent bot and little redundance, half distributed P2P Botnet threatens network security increasingly, so the research of the detecting methods about it has more practical significance. This paper addressed the definition, architecture, functions and mechanism of half distributed P2P Botnet, analyzed several popular detecting methods, and comparing with each other. Finally, discussed the detection method development trend of half distributed P2P Botnet.