Paper

Mining Function Homology of Bot Loaders from Honeypot Logs

The authors propose a text-based method to investigate and analyze bot loaders using high-interaction honeypots. They collect request logs, define eight loader families via agglomerative clustering, and analyze functional homology using sequence alignment techniques, revealing, according to the study, evolutionary relationships among botnet infrastructures such as Mirai.

HoneypotNetwork

What we know

The authors propose a text-based method to investigate and analyze bot loaders using high-interaction honeypots. They collect request logs, define eight loader families via agglomerative clustering, and analyze functional homology using sequence alignment techniques, revealing, according to the study, evolutionary relationships among botnet infrastructures such as Mirai.

Evidence limits

This entry is based solely on the publicly available title and abstract; the full text was not reviewed and the findings were not independently replicated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. Mining Function Homology of Bot Loaders from Honeypot Logs
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX