Markov Chain-Based Modeling of Malicious Botnet Spread for Botnet Defense Systems

A botnet defense system (BDS) is a cyber-security system that defends an IoT system against malicious botnets. In a BDS, malicious botnets are detected by white-hat botnets, and are deleted from an IoT system. In this paper, we propose a modeling method of the spread of malicious botnets in a BDS, where white-hat botnets patrol according to the computation result of surveillance by multiple agents. Using the graph structure of an IoT system and the paths of white-hat botnets, the spread of malicious botnets is modeled by a discrete-time Markov chain. A numerical example is presented to demonstrate the proposed method.