{"id":"https://openalex.org/W4225487048","doi":"https://doi.org/10.1109/tdsc.2023.3300738","title":"D-LNBot: A Scalable, Cost-Free and Covert Hybrid Botnet on Bitcoin's Lightning Network","display_name":"D-LNBot: A Scalable, Cost-Free and Covert Hybrid Botnet on Bitcoin's Lightning Network","publication_year":2023,"publication_date":"2023-08-01","ids":{"openalex":"https://openalex.org/W4225487048","doi":"https://doi.org/10.1109/tdsc.2023.3300738"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3300738","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3300738","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Ahmet Kurt","orcid":"https://orcid.org/0000-0002-7175-1739"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmet Kurt","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Florida International University, Miami, FL, USA"],"raw_orcid":"https://orcid.org/0000-0002-7175-1739","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028224541","display_name":"Enes Erdin","orcid":"https://orcid.org/0000-0003-2979-8143"},"institutions":[{"id":"https://openalex.org/I32038505","display_name":"University of Central Arkansas","ror":"https://ror.org/029bp0k25","country_code":"US","type":"education","lineage":["https://openalex.org/I32038505"]},{"id":"https://openalex.org/I4210152127","display_name":"Conway School of Landscape Design","ror":"https://ror.org/04q7y8a54","country_code":"US","type":"education","lineage":["https://openalex.org/I4210152127"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Enes Erdin","raw_affiliation_strings":["Department of Computer Science and Engineering, University of Central Arkansas, Conway, AR, USA"],"raw_orcid":"https://orcid.org/0000-0003-2979-8143","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of Central Arkansas, Conway, AR, USA","institution_ids":["https://openalex.org/I32038505","https://openalex.org/I4210152127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078029373","display_name":"Kemal Akkaya","orcid":"https://orcid.org/0000-0002-7103-4545"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kemal Akkaya","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Florida International University, Miami, FL, USA"],"raw_orcid":"https://orcid.org/0000-0002-7103-4545","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019145852","display_name":"A. Selcuk Uluagac","orcid":"https://orcid.org/0000-0002-9823-3464"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Selcuk Uluagac","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Florida International University, Miami, FL, USA"],"raw_orcid":"https://orcid.org/0000-0002-9823-3464","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5066342733","display_name":"Mumin Cebe","orcid":"https://orcid.org/0000-0003-2843-8904"},"institutions":[{"id":"https://openalex.org/I102461120","display_name":"Marquette University","ror":"https://ror.org/04gr4te78","country_code":"US","type":"education","lineage":["https://openalex.org/I102461120"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mumin Cebe","raw_affiliation_strings":["Department of Computer Science, Marquette University, Milwaukee, WI, USA"],"raw_orcid":"https://orcid.org/0000-0003-2843-8904","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Marquette University, Milwaukee, WI, USA","institution_ids":["https://openalex.org/I102461120"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00384029,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":"4","first_page":"2162","last_page":"2180"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.8914791345596313},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.7697160840034485},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6814448833465576},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6381037831306458},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.578928530216217},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47859641909599304},{"id":"https://openalex.org/keywords/payment","display_name":"Payment","score":0.4737592339515686},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3953530192375183},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1574021875858307},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.0962064266204834}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.8914791345596313},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.7697160840034485},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6814448833465576},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6381037831306458},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.578928530216217},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47859641909599304},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.4737592339515686},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3953530192375183},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1574021875858307},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0962064266204834}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3300738","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3300738","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320307764","display_name":"Microsoft","ror":"https://ror.org/00d0nc645"},{"id":"https://openalex.org/F4320309327","display_name":"Google","ror":"https://ror.org/00njsd438"},{"id":"https://openalex.org/F4320333707","display_name":"Florida Center for Cybersecurity, University of South Florida","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1497347928","https://openalex.org/W1911710799","https://openalex.org/W1992371956","https://openalex.org/W1992713826","https://openalex.org/W2046762680","https://openalex.org/W2102262986","https://openalex.org/W2103049871","https://openalex.org/W2111586182","https://openalex.org/W2159418097","https://openalex.org/W2169528473","https://openalex.org/W2169753451","https://openalex.org/W2172011174","https://openalex.org/W2224439410","https://openalex.org/W2287116719","https://openalex.org/W2621188356","https://openalex.org/W2752533296","https://openalex.org/W2793178310","https://openalex.org/W2948041999","https://openalex.org/W2966046630","https://openalex.org/W2980502996","https://openalex.org/W2996344571","https://openalex.org/W3008121187","https://openalex.org/W3045026850","https://openalex.org/W3080177460","https://openalex.org/W3085980483","https://openalex.org/W3106615352","https://openalex.org/W3192454829","https://openalex.org/W4211068006","https://openalex.org/W4226322492","https://openalex.org/W4287666183","https://openalex.org/W6607594771","https://openalex.org/W6793285265"],"related_works":["https://openalex.org/W585257","https://openalex.org/W1152574","https://openalex.org/W1112477","https://openalex.org/W928209","https://openalex.org/W13127727","https://openalex.org/W909266","https://openalex.org/W1475560","https://openalex.org/W6720599","https://openalex.org/W13732297","https://openalex.org/W7862181"],"abstract_inverted_index":{"While":[0],"various":[1,52],"covert":[2,127],"botnets":[3],"were":[4],"proposed":[5],"in":[6,103,142,211],"the":[7,23,26,59,69,72,75,78,82,85,104,112,118,123,130,140,177,181,188,196,198,206,212,219,242,258],"past,":[8],"they":[9],"still":[10],"lack":[11],"complete":[12],"anonymization":[13],"for":[14,233,252],"their":[15,143,264,288],"servers/botmasters":[16],"or":[17,120],"suffer":[18],"from":[19],"slow":[20],"communication":[21],"between":[22],"botmaster":[24,79,207],"and":[25,41,87,179,205,218,235,255,261,266,273,283,286],"bots.":[27],"In":[28,74,129,193],"this":[29,158],"paper,":[30],"we":[31,57,226,270],"first":[32,76],"propose":[33],"a":[34,62,163,275],"new":[35,220],"generation":[36],"hybrid":[37],"botnet":[38,65,200],"that":[39,168,228],"covertly":[40],"efficiently":[42],"communicates":[43],"over":[44],"Bitcoin":[45],"Lightning":[46],"Network":[47],"(LN),":[48],"called":[49],"LNBot.":[50,247],"Exploiting":[51],"anonymity":[53],"features":[54],"of":[55,61,71,106,149,166,224,277],"LN,":[56,225],"show":[58,227],"feasibility":[60],"scalable":[63],"two-layer":[64],"which":[66],"completely":[67],"anonymizes":[68],"identity":[70],"botmaster.":[73],"layer,":[77,132],"anonymously":[80],"sends":[81],"commands":[83,99,113,138,236],"to":[84,100,122,125,139,145,151,187,195,240,246,280],"command":[86],"control":[88],"(C&C)":[89],"servers":[90,134,172,244],"through":[91],"regular":[92],"LN":[93,109,260],"payments.":[94],"Specifically,":[95],"LNBot":[96,167,254,282],"allows":[97],"botmaster's":[98],"be":[101,231],"sent":[102],"form":[105],"surreptitious":[107],"multi-hop":[108],"payments,":[110],"where":[111],"are":[114,237],"either":[115],"encoded":[116],"with":[117],"payments":[119,124],"attached":[121],"provide":[126,272],"communications.":[128],"second":[131],"C&C":[133,171,182,243],"further":[135,155],"relay":[136],"those":[137],"bots":[141],"mini-botnets":[144],"launch":[146],"any":[147],"type":[148],"attacks":[150],"victim":[152],"machines.":[153],"We":[154,248],"improve":[156],"on":[157,176,191,257],"design":[159],"by":[160,173,184],"introducing":[161],"D-LNBot;":[162],"distributed":[164,204],"version":[165],"generates":[169],"its":[170],"infecting":[174],"users":[175],"Internet":[178],"forms":[180],"connections":[183],"opening":[185],"channels":[186],"existing":[189],"nodes":[190],"LN.":[192],"contrary":[194],"LNBot,":[197],"whole":[199],"formation":[201],"phase":[202],"is":[203,208],"never":[209],"involved":[210],"process.":[213],"By":[214],"utilizing":[215],"Bitcoin's":[216],"Testnet":[217],"message":[221],"attachment":[222],"feature":[223],"D-LNBot":[229,256,284],"can":[230],"run":[232],"free":[234],"propagated":[238],"faster":[239],"all":[241],"compared":[245],"presented":[249],"proof-of-concept":[250],"implementations":[251],"both":[253],"actual":[259],"extensively":[262],"analyzed":[263],"delay":[265],"cost":[267],"performance.":[268],"Finally,":[269],"also":[271],"discuss":[274],"list":[276],"potential":[278],"countermeasures":[279],"detect":[281],"activities":[285],"minimize":[287],"impacts.":[289]},"counts_by_year":[],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2022-05-05T00:00:00"}