Efficiency estimation of the protection software for neutralization and elimination of botnets

Abstract

Today there are no methods to evaluate protection effectiveness that would allow comparing defense and botnet attacks in particular. A set of metrics for efficiency evaluation has been proposed. The proposed efficiency evaluation metrics account for the network nature of modern defense and attack. They will provide quantitative assessment of factors affecting defense or attack efficiency. Therefore, these metrics will allow making a conclusion about results of the network contradiction between benign and malignant agents, and about LAN and WAN protection nodes.