• Search Research Projects
  • Search Researchers
  • How to Use
  1. Back to previous page

Development of a White Hat Botnet System for Defending Against IoT Malware Cyberattacks

Research Project

Project/Area Number 19K11965
Research Category

Grant-in-Aid for Scientific Research (C)

Allocation TypeMulti-year Fund
Section一般
Review Section Basic Section 60070:Information security-related
Research InstitutionYamaguchi University

Principal Investigator

Yamaguchi Shingo  山口大学, 大学院創成科学研究科, 教授 (00294653)

Co-Investigator(Kenkyū-buntansha) ANUARUDDIN MOHD  山口大学, 大学院創成科学研究科, 助教 (80804492)
Project Period (FY) 2019-04-01 – 2024-03-31
Project Status Completed (Fiscal Year 2023)
Budget Amount *help
¥4,420,000 (Direct Cost: ¥3,400,000、Indirect Cost: ¥1,020,000)
Fiscal Year 2021: ¥1,560,000 (Direct Cost: ¥1,200,000、Indirect Cost: ¥360,000)
Fiscal Year 2020: ¥1,430,000 (Direct Cost: ¥1,100,000、Indirect Cost: ¥330,000)
Fiscal Year 2019: ¥1,430,000 (Direct Cost: ¥1,100,000、Indirect Cost: ¥330,000)
Keywordsボットネット / セキュリティ / マルウェア / ワーム / マルチエージェント / ペトリネット / IoT / Mirai / 実装 / シミュレーション / モデリング / セキュリティ技術 / エージェント
Outline of Research at the Start

IoT機器が「悪玉」ソフトウェアに乗っ取られ、大規模なサイバー攻撃の踏み台にされる事案が多数発生している。IoT機器を速やかに更新する必要があるが、IoT機器は爆発的に増えているため、人海戦術での対応には限界がある。そこで本研究では、攻撃者がサイバー攻撃に「悪玉」ソフトウェアを使うやり方に倣って、防御者がサイバー攻撃からの防御に「善玉」ソフトウェアを使えるようにして防御能力を飛躍的に向上させることを目指す。

Outline of Final Research Achievements

This research proposed and implemented a new system to counter IoT malware cyber attacks: the Botnet Defense System (BDS). The BDS continuously monitors the network and detects malicious botnets. Once detecting a botnet, it formulates an effective disinfection strategy based on its characteristics. It then deploys a white hat worm into the network and builds a white hat botnet. It then commands and controlls the white hat botnet to exterminate the malicious botnet. We implementing BDS in a local IoT network and demonstrated its effectiveness. Furthermore, the research results were made publicly available to the world to share findings.

Academic Significance and Societal Importance of the Research Achievements

本研究はボットネットの数理モデルに基づく理論研究とボットネット防衛システムの開発を通して、ボットネット対策における学術研究の進展に大きく貢献するものである。従来の研究では解明できなかったボットネットの複雑な挙動を、独自開発のシミュレータを用いて定量的に解析することに成功した。これは、より効果的な防衛技術を開発するための学術的基盤を築く画期的な成果である。また悪玉ボットネットと戦う善玉ボットネット、その戦いを指揮統制するシステムのアーキテクチャやコンポーネント、戦略等を明らかにし、プロトタイプを実装した。これらは新たな技術開発のインスピレーションを与え、その構築基盤をなすものとして期待される。

Report

(6 results)
  • 2023 Annual Research Report   Final Research Report ( PDF )
  • 2022 Research-status Report
  • 2021 Research-status Report
  • 2020 Research-status Report
  • 2019 Research-status Report
  • Research Products

    (52 results)

All 2024 2023 2022 2021 2020 2019 Other

All Int'l Joint Research (6 results) Journal Article (7 results) (of which Peer Reviewed: 7 results,  Open Access: 5 results) Presentation (34 results) (of which Int'l Joint Research: 29 results,  Invited: 2 results) Book (4 results) Remarks (1 results)

  • [Int'l Joint Research] NIT Kurukshetra(インド)

    • Related Report
      2023 Annual Research Report
  • [Int'l Joint Research] Kasetsart University(タイ)

    • Related Report
      2023 Annual Research Report
  • [Int'l Joint Research] Asia University, Taiwan(その他の国・地域(台湾))

    • Related Report
      2023 Annual Research Report
  • [Int'l Joint Research] NIT Kurukshetra(インド)

    • Related Report
      2021 Research-status Report
  • [Int'l Joint Research] 国立工科大学クルクシェトラ(インド)

    • Related Report
      2020 Research-status Report
  • [Int'l Joint Research] インド国立クルクシェトラ工科大学(インド)

    • Related Report
      2019 Research-status Report
  • [Journal Article] Diffusion of White-Hat Botnet Using Lifespan with Controllable Ripple Effect for Malware Removal in IoT Networks2023

    • Author(s)
      Bin Ahmadon Mohd Anuaruddin、Yamaguchi Shingo
    • Journal Title

      Sensors

      Volume: 23 Issue: 2 Pages: 1018-1018

    • DOI

      10.3390/s23021018

    • Related Report
      2022 Research-status Report
    • Peer Reviewed / Open Access
  • [Journal Article] Machine Learning White-Hat Worm Launcher for Tactical Response by Zoning in Botnet Defense System2022

    • Author(s)
      Pan Xiangnan、Yamaguchi Shingo
    • Journal Title

      Sensors

      Volume: 22 Issue: 13 Pages: 4666-4666

    • DOI

      10.3390/s22134666

    • Related Report
      2022 Research-status Report
    • Peer Reviewed / Open Access
  • [Journal Article] Botnet Defense System: Observability, Controllability, and Basic Command and Control Strategy2022

    • Author(s)
      Yamaguchi Shingo
    • Journal Title

      Sensors

      Volume: 22 Issue: 23 Pages: 9423-9423

    • DOI

      10.3390/s22239423

    • Related Report
      2022 Research-status Report
    • Peer Reviewed / Open Access
  • [Journal Article] Machine-Learning-Based White-Hat Worm Launcher in Botnet Defense2022

    • Author(s)
      Xiangnan Pan, Shingo Yamaguchi, Taku Kageyama, Mohd Hafizuddin Bin Kamilin
    • Journal Title

      International Journal of Software Science and Computational Intelligence

      Volume: 14(1) Issue: 1 Pages: 1-14

    • DOI

      10.4018/ijssci.291713

    • Related Report
      2021 Research-status Report
    • Peer Reviewed
  • [Journal Article] Botnet Defense System: Concept, Design, and Basic Strategy2020

    • Author(s)
      Yamaguchi Shingo
    • Journal Title

      Information

      Volume: 11 Issue: 11 Pages: 516-516

    • DOI

      10.3390/info11110516

    • Related Report
      2020 Research-status Report
    • Peer Reviewed / Open Access
  • [Journal Article] White-Hat Worm to Fight Malware and Its Evaluation by Agent-Oriented Petri Nets2020

    • Author(s)
      Shingo Yamaguchi
    • Journal Title

      SENSORS

      Volume: 20(2) Issue: 2 Pages: 556-556

    • DOI

      10.3390/s20020556

    • Related Report
      2019 Research-status Report
    • Peer Reviewed / Open Access
  • [Journal Article] Modeling and Evaluation of Mitigation Methods against IoT Malware Mirai with Agent-Oriented Petri Net PN22019

    • Author(s)
      Shingo Yamaguchi, Hiroaki Tanaka, Mohd Anuaruddin Bin Ahmadon
    • Journal Title

      International Journal of Internet of Things and Cyber-Assurance

      Volume: - Issue: 1 Pages: 1-1

    • DOI

      10.1504/ijitca.2019.10021463

    • Related Report
      2019 Research-status Report
    • Peer Reviewed
  • [Presentation] Mesa-Based Simulator of Botnet Defense System and Impact Evaluation of Botnet Infection Rates2024

    • Author(s)
      Shingo Yamaguchi
    • Organizer
      ICEIC 2024
    • Related Report
      2023 Annual Research Report
    • Int'l Joint Research
  • [Presentation] Implementation of Infection Environment for White-hat Worm and Malicious Botnet Using Mirai Source Code2024

    • Author(s)
      Aoi Fukushima, Yudai Yamamoto, Shingo Yamaguchi
    • Organizer
      ICIET 2024
    • Related Report
      2023 Annual Research Report
    • Int'l Joint Research
  • [Presentation] On Building a Firewall with White Hat Bots in the Neighborhood of Malicious Bots in Large-Scale Networks2024

    • Author(s)
      Ryutaro Matsumoto, Shingo Yamaguchi
    • Organizer
      ETTIS 2024
    • Related Report
      2023 Annual Research Report
    • Int'l Joint Research
  • [Presentation] On Countermeasure Against Repeatedly Occurring Botnets by Collective Reboot2023

    • Author(s)
      Yuji Katsura, Shingo Yamaguchi
    • Organizer
      ITC-CSCC 2023
    • Related Report
      2023 Annual Research Report
    • Int'l Joint Research
  • [Presentation] Smallest Botnet Firewall Building Problem and a Girvan-Newman Algorithm-Based Heuristic Solution2023

    • Author(s)
      Shingo Yamaguchi, Ryutaro Matsumoto
    • Organizer
      IEEE ICCE-TW 2023
    • Related Report
      2023 Annual Research Report
    • Int'l Joint Research
  • [Presentation] Estimating the Infection Spread Rate of Malicious Botnets Using Reconnaissance Worms in Botnet Defense System2023

    • Author(s)
      Ryo Yamashita, Shingo Yamaguchi
    • Organizer
      IEEE ICCE-Asia 2023
    • Related Report
      2023 Annual Research Report
    • Int'l Joint Research
  • [Presentation] On Building Firewall with White-Hat Bots to Prevent the Infection Spread of Malicious Botnets2023

    • Author(s)
      Ryutaro Matsumoto, Shingo Yamaguchi
    • Organizer
      ICIET 2023
    • Related Report
      2022 Research-status Report
    • Int'l Joint Research
  • [Presentation] 領域リブートによるボットネット対策について2023

    • Author(s)
      桂 雄治, 山口 真悟
    • Organizer
      電子情報通信学会技術研究報告
    • Related Report
      2022 Research-status Report
  • [Presentation] Botnet Defense Systemにおける善玉ワームによる悪玉ボットネットの探索について2023

    • Author(s)
      山下 諒・山口 真悟
    • Organizer
      電子情報通信学会技術研究報告
    • Related Report
      2022 Research-status Report
  • [Presentation] On Resident Strategy for White-Hat Botnet in Botnet Defense System2022

    • Author(s)
      Shingo Yamaguchi, Daisuke Makihara
    • Organizer
      IEEE ICCE-TW 2022
    • Related Report
      2022 Research-status Report
    • Int'l Joint Research
  • [Presentation] A Method to Prevent Known Attacks and Their Variants by Combining Honeypots and IPS2022

    • Author(s)
      Yudai Yamamoto, Shingo Yamaguchi
    • Organizer
      IEEE GCCE 2022
    • Related Report
      2022 Research-status Report
    • Int'l Joint Research
  • [Presentation] On Directional Spread of White-hat Botnet by Heterogeneous Use in Botnet Defence System2022

    • Author(s)
      Kazuki Ohsaki, Shingo Yamaguchi
    • Organizer
      IEEE ICCE-Asia 2022
    • Related Report
      2022 Research-status Report
    • Int'l Joint Research
  • [Presentation] Mathematical Modeling and Analysis of the Dictionary Attack Mechanism in IoT Malware Mirai2022

    • Author(s)
      Gaku Tatebatake, Shingo Yamaguchi
    • Organizer
      IEEE ICCE-Asia 2022
    • Related Report
      2022 Research-status Report
    • Int'l Joint Research
  • [Presentation] 善玉ボットによる悪玉ボットネットの感染拡大防止について2022

    • Author(s)
      松本 隆太郎, 山口 真悟
    • Organizer
      電子情報通信学会技術研究報告
    • Related Report
      2022 Research-status Report
  • [Presentation] Research and Development of Botnet Defense System2022

    • Author(s)
      Yamaguchi Shingo
    • Organizer
      HCII 2022
    • Related Report
      2022 Research-status Report
    • Int'l Joint Research
  • [Presentation] Evaluation on White-Hat Worm Diffusion Method Based on the Evolution of Its Lifespan in Wireless Networks2022

    • Author(s)
      Mohd Anuaruddin Bin Ahmadon, Shingo Yamaguchi
    • Organizer
      IEEE ICCE 2022
    • Related Report
      2021 Research-status Report
    • Int'l Joint Research
  • [Presentation] A DBSCAN-based White-Hat Worm Launcher for Botnet Defense System2022

    • Author(s)
      Xiangnan Pan, Shingo Yamaguchi
    • Organizer
      IEEE LifeTech 2022
    • Related Report
      2021 Research-status Report
    • Int'l Joint Research
  • [Presentation] On Application of Botnet Defense System to IoT Systems Including Private Networks2021

    • Author(s)
      Shingo Yamaguchi
    • Organizer
      IEEE ICCE-TW 2021
    • Related Report
      2021 Research-status Report
    • Int'l Joint Research
  • [Presentation] ボットネット防衛システムの研究開発2021

    • Author(s)
      山口 真悟
    • Organizer
      第34回回路とシステムワークショップ
    • Related Report
      2021 Research-status Report
    • Invited
  • [Presentation] Machine-Learning-Based White-Hat Worm Launcher Adaptable to Large-Scale IoT Network2021

    • Author(s)
      Xiangnan Pan, Shingo Yamaguchi, Taku Kageyama
    • Organizer
      IEEE GCCE 2021
    • Related Report
      2021 Research-status Report
    • Int'l Joint Research
  • [Presentation] A Proposal of Patrol Function by White-Hat Worm in Botnet Defense System2021

    • Author(s)
      Daisuke Makihara, Shingo Yamaguchi
    • Organizer
      IEEE ICCE-Asia 2021
    • Related Report
      2021 Research-status Report
    • Int'l Joint Research
  • [Presentation] A Proposal of Heterogeneous White-Hat Botnet in Botnet Defense System2021

    • Author(s)
      Kazuki Ohsaki, Shingo Yamaguchi
    • Organizer
      IEEE ICCE-Asia 2021
    • Related Report
      2021 Research-status Report
    • Int'l Joint Research
  • [Presentation] On Tactics to Deploy White-Hat Worms in Botnet Defense System2021

    • Author(s)
      Taku Kageyama, Shingo Yamaguchi
    • Organizer
      IEEE GCCE 2021
    • Related Report
      2021 Research-status Report
    • Int'l Joint Research
  • [Presentation] A Basic Command and Control Strategy in Botnet Defense System2021

    • Author(s)
      Shingo Yamaguchi
    • Organizer
      IEEE ICCE 2021
    • Related Report
      2020 Research-status Report
    • Int'l Joint Research
  • [Presentation] An End-To-End Security Framework for Smart Healthcare Information Sharing Against Botnet-Based Cyber-Attacks2021

    • Author(s)
      Megha Quamara, B. B. Gupta, Shingo Yamaguchi
    • Organizer
      IEEE ICCE 2021
    • Related Report
      2020 Research-status Report
    • Int'l Joint Research
  • [Presentation] Mitigating Botnet Based DDoS Attacks by Selecting Incentivized Cooperating ISPs for Risk Transfer2021

    • Author(s)
      Amrita Dahiya, B.B. Gupta, Shingo Yamaguchi, Kostas Psannis
    • Organizer
      IEEE ICCE 2021
    • Related Report
      2020 Research-status Report
    • Int'l Joint Research
  • [Presentation] Botnet Defense System and Its Basic Strategy Against Malicious Botnet2020

    • Author(s)
      Shingo Yamaguchi
    • Organizer
      IEEE ICCE-TW 2020
    • Related Report
      2020 Research-status Report
    • Int'l Joint Research
  • [Presentation] Influence Analysis of Network Density on White-Hat Worm and Basic Strategy for Botnet Defense System2020

    • Author(s)
      Shingo Yamaguchi
    • Organizer
      ECTI-CON 2020
    • Related Report
      2020 Research-status Report
    • Int'l Joint Research
  • [Presentation] White-Hat Worm Launcher Based on Deep Learning in Botnet Defense System2020

    • Author(s)
      Mohd Hafizuddin Bin Kamilin, Shingo Yamaguchi
    • Organizer
      IEEE ICCE-Asia 2020
    • Related Report
      2020 Research-status Report
    • Int'l Joint Research
  • [Presentation] Botnet Defense System: Concept and Basic Strategy2020

    • Author(s)
      Shingo Yamaguchi
    • Organizer
      IEEE ICCE 2020
    • Related Report
      2019 Research-status Report
    • Int'l Joint Research
  • [Presentation] ボットネット防衛システムの提案と基本戦略について2020

    • Author(s)
      山口 真悟
    • Organizer
      電子情報通信学会システム数理と応用研究会
    • Related Report
      2019 Research-status Report
  • [Presentation] Formal modeling and analysis of battle between IoT malware Mirai and IoT worm Hajime2019

    • Author(s)
      Shingo Yamaguchi
    • Organizer
      ECTI-CON 2019
    • Related Report
      2019 Research-status Report
    • Int'l Joint Research / Invited
  • [Presentation] Modeling and Evaluation of IoT Worm with Lifespan and Secondary Infectivity by Agent-Oriented Petri Net PN22019

    • Author(s)
      Shingo Yamaguchi
    • Organizer
      IEEE ICCE-TW 2019
    • Related Report
      2019 Research-status Report
    • Int'l Joint Research
  • [Presentation] Quantitative Evaluation of Hajime with Secondary Infectivity in Response to Mirai's Infection Situation2019

    • Author(s)
      Hiroaki Tanaka, Shingo Yamaguchi, Monika Mikami
    • Organizer
      IEEE GCCE 2019
    • Related Report
      2019 Research-status Report
    • Int'l Joint Research
  • [Book] Malware - Handbook of Prevention and Detection, (Advances in Information Security)2024

    • Author(s)
      Shingo Yamaguchi
    • Total Pages
      200
    • Publisher
      Springer
    • Related Report
      2023 Annual Research Report
  • [Book] Advances in Malware and Data-Driven Network Security2021

    • Author(s)
      Shingo Yamaguchi, Brij Gupta
    • Total Pages
      304
    • Publisher
      IGI Global
    • ISBN
      9781799877905
    • Related Report
      2021 Research-status Report
  • [Book] Prime Archives in Sensors2020

    • Author(s)
      Shingo Yamaguchi
    • Total Pages
      18
    • Publisher
      Vide Leaf
    • ISBN
      9788194517573
    • Related Report
      2020 Research-status Report
  • [Book] Security, Privacy, and Forensics Issues in Big Data2020

    • Author(s)
      Shingo Yamaguchi, Brij Gupta
    • Total Pages
      16
    • Publisher
      Information Science Reference
    • ISBN
      9781522597421
    • Related Report
      2019 Research-status Report
  • [Remarks] Botnet Defense System

    • URL

      https://ds0n.cc.yamaguchi-u.ac.jp/~shingo/BDS/

    • Related Report
      2023 Annual Research Report

URL: 

Published: 2019-04-18   Modified: 2025-01-30  

Information User Guide FAQ News Terms of Use Attribution of KAKENHI

Powered by NII kakenhi