Análise de mensagens associadas à cibersegurança em redes IRC
Resumo
Este artigo apresenta a análise e extração de informações de conteúdos discutidos em salas de Internet Relay Chat (IRC) relacionados à segurança de computadores. Foram monitorados e analisados canais que abordam segurança de sistemas computacionais e atividades suspeitas. A partir da análise, é proposta uma abordagem para extração de alertas de segurança, que estende mecanismos de monitoramento usando palavras-chave com métodos compostos por heurísticas, processamento de linguagem natural e recuperação de informação. Como resultados, obteve-se a identificação de mensagens relacionadas à segurança de redes de computadores e mecanismos para a extração de notificações relevantes, como alertas de ameaças e falhas de segurança.Referências
Benjamin, V. and Chen, H. (2014). Time-to-event modeling for predicting hacker irc community participant trajectory. In IEEE Joint JISIC, 2014, pages 25–32.
Brown, D. A. (2007). Architecture for an automated irc investigation tool. Master’s thesis, West Virginia University.
Carpine, F., Mazzariello, C., and Sansone, C. (2013). Online irc botnet detection using a soinn classifier. In IEEE ICC 2013, pages 1351–1356.
Décary-Hétu, D. and Dupont, B. (2012). The social network of hackers. Global Crime, 13(3):160–175.
Décary-Hétu, D., Dupont, B., and Fortin, F. (2014). Policing the hackers by hacking them: Studying online deviants in irc chat rooms. In Networks and Network Analysis for Defence and Security, pages 63–82. Springer International Publishing.
Gainaru, A., Dumitrescu, S. D., and Trausan-Matu, S. (2010). Toolkit for automatic analysis of chat conversations. In 8th COMM 2010 (IEEE), pages 99–102.
Houmansadr, A. and Borisov, N. (2013). Botmosaic: Collaborative network watermark for the detection of irc-based botnets. Journal of Systems and Software, 86(3):707 – 715.
Iqbal, F., Fung, B. C. M., and Debbabi, M. (2012). Mining criminal networks from chat log. In IEEE/WIC/ACM.
Lu, W. and Ghorbani, A. (2008). Botnets detection based on irc-community. In IEEE GLOBECOM 2008. IEEE, pages 1–5.
Ma, X., Guan, X., Tao, J., Zheng, Q., Guo, Y., Liu, L., and Zhao, S. (2010). A novel irc botnet detection method based on packet size sequence. In IEEE ICC 2010, pages 1–5.
Manning, C. D. and Schütze, H. (1999). Foundations of statistical natural language processing. MIT press.
Mazzariello, C. (2008). Irc traffic analysis for botnet detection. In Information Assurance and Security, 2008. ISIAS ’08. Fourth International Conference on, pages 318–323.
Michels, M. O. (2012). Real time text analysis on internet relay chat conversations. Master’s thesis, Purdue University.
Oikarinen, J. and Reed, D. (1993). Internet Relay Chat Protocol. RFC 1459 (Experimental). Updated by RFCs 2810, 2811, 2812, 2813.
Wang, W., Fang, B., Zhang, Z., and Li, C. (2009). A novel approach to detect irc-based botnets. In IEEE NSWCTC 2009, volume 1, pages 408–411.
Brown, D. A. (2007). Architecture for an automated irc investigation tool. Master’s thesis, West Virginia University.
Carpine, F., Mazzariello, C., and Sansone, C. (2013). Online irc botnet detection using a soinn classifier. In IEEE ICC 2013, pages 1351–1356.
Décary-Hétu, D. and Dupont, B. (2012). The social network of hackers. Global Crime, 13(3):160–175.
Décary-Hétu, D., Dupont, B., and Fortin, F. (2014). Policing the hackers by hacking them: Studying online deviants in irc chat rooms. In Networks and Network Analysis for Defence and Security, pages 63–82. Springer International Publishing.
Gainaru, A., Dumitrescu, S. D., and Trausan-Matu, S. (2010). Toolkit for automatic analysis of chat conversations. In 8th COMM 2010 (IEEE), pages 99–102.
Houmansadr, A. and Borisov, N. (2013). Botmosaic: Collaborative network watermark for the detection of irc-based botnets. Journal of Systems and Software, 86(3):707 – 715.
Iqbal, F., Fung, B. C. M., and Debbabi, M. (2012). Mining criminal networks from chat log. In IEEE/WIC/ACM.
Lu, W. and Ghorbani, A. (2008). Botnets detection based on irc-community. In IEEE GLOBECOM 2008. IEEE, pages 1–5.
Ma, X., Guan, X., Tao, J., Zheng, Q., Guo, Y., Liu, L., and Zhao, S. (2010). A novel irc botnet detection method based on packet size sequence. In IEEE ICC 2010, pages 1–5.
Manning, C. D. and Schütze, H. (1999). Foundations of statistical natural language processing. MIT press.
Mazzariello, C. (2008). Irc traffic analysis for botnet detection. In Information Assurance and Security, 2008. ISIAS ’08. Fourth International Conference on, pages 318–323.
Michels, M. O. (2012). Real time text analysis on internet relay chat conversations. Master’s thesis, Purdue University.
Oikarinen, J. and Reed, D. (1993). Internet Relay Chat Protocol. RFC 1459 (Experimental). Updated by RFCs 2810, 2811, 2812, 2813.
Wang, W., Fang, B., Zhang, Z., and Li, C. (2009). A novel approach to detect irc-based botnets. In IEEE NSWCTC 2009, volume 1, pages 408–411.
Publicado
09/11/2015
Como Citar
CAMPIOLO, Rodrigo; BATISTA, Daniel Macêdo.
Análise de mensagens associadas à cibersegurança em redes IRC. In: SIMPÓSIO BRASILEIRO DE SEGURANÇA DA INFORMAÇÃO E DE SISTEMAS COMPUTACIONAIS (SBSEG), 15. , 2015, Florianópolis.
Anais [...].
Porto Alegre: Sociedade Brasileira de Computação,
2015
.
p. 114-127.
DOI: https://doi.org/10.5753/sbseg.2015.20089.
