Bot Detection

[Abstract]
Recently, botnet becomes a social problem due to the expansion of bot infection. It is important to implement an information system which detects bot-infected computers and alerts them. We focused on bots using IRC to communicate, and examined the behavior of such bots when they connected to an IRC server. We observed the actual traffic of some ports which were often used by IRC protocol. We examined the distribution of the intervals and confirmed that the communication from other IP addresses showed similar behavior.