A malware collection and analysis framework based on darknet traffic

摘要: Since a darknet is set of unused IP addresses(i.e., no real hosts are operated with them), we unable to observe the network traffic on it generally. In many cases, however, attackers or infected by some malwares send their attack codes target systems networks at random. Because this, gives us good opportunity monitor malicious activities that happening Internet. By analyzing traffic, able get an insight into recent trends, but there fatal limitation most have payload data. This means cannot collect from original traffic. this paper, propose malware collection and analysis framework based With proposed framework, in wild respond against potential cyber attacks using them. Our experimental results environments show effectiveness framework.