{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,14]],"date-time":"2026-05-14T20:02:31Z","timestamp":1778788951273,"version":"3.51.4"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030590123","type":"print"},{"value":"9783030590130","type":"electronic"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-59013-0_36","type":"book-chapter","created":{"date-parts":[[2020,9,12]],"date-time":"2020-09-12T10:03:03Z","timestamp":1599904983000},"page":"734-755","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":18,"title":["LNBot: A Covert Hybrid Botnet on Bitcoin Lightning Network for Fun and Profit"],"prefix":"10.1007","author":[{"given":"Ahmet","family":"Kurt","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Enes","family":"Erdin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mumin","family":"Cebe","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kemal","family":"Akkaya","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"A. Selcuk","family":"Uluagac","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,9,13]]},"reference":[{"key":"36_CR1","unstructured":"1ml.com: Lightning network search and analysis engine (2019). https:\/\/1ml.com\/"},{"key":"36_CR2","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"34","DOI":"10.1007\/978-3-662-48051-9_3","volume-title":"Financial Cryptography and Data Security","author":"ST Ali","year":"2015","unstructured":"Ali, S.T., McCorry, P., Lee, P.H.-J., Hao, F.: ZombieCoin: powering next-generation botnets with bitcoin. In: Brenner, M., Christin, N., Johnson, B., Rohloff, K. (eds.) FC 2015. LNCS, vol. 8976, pp. 34\u201348. Springer, Heidelberg (2015). https:\/\/doi.org\/10.1007\/978-3-662-48051-9_3"},{"key":"36_CR3","doi-asserted-by":"crossref","unstructured":"Ali, S.T., McCorry, P., Lee, P.H.J., Hao, F.: Zombiecoin 2.0: managing next-generation botnets using bitcoin. Int. J. Inf. Secur. 17(4), 411\u2013422 (2018)","DOI":"10.1007\/s10207-017-0379-8"},{"key":"36_CR4","doi-asserted-by":"crossref","unstructured":"Baden, M., Torres, C.F., Pontiveros, B.B.F., State, R.: Whispering botnet command and control instructions. In: 2019 Crypto Valley Conference on Blockchain Technology (CVCBT), pp. 77\u201381. IEEE (2019)","DOI":"10.1109\/CVCBT.2019.00014"},{"key":"36_CR5","doi-asserted-by":"crossref","unstructured":"Bailey, M., Cooke, E., Jahanian, F., Xu, Y., Karir, M.: A survey of botnet technology and defenses. In: Cybersecurity Applications & Technology Conference For Homeland Security, CATCH 2009, pp. 299\u2013304. IEEE (2009)","DOI":"10.1109\/CATCH.2009.40"},{"key":"36_CR6","doi-asserted-by":"crossref","unstructured":"B\u00e9res, F., Seres, I.A., Bencz\u00far, A.A.: A cryptoeconomic traffic analysis of bitcoins lightning network. arXiv preprint arXiv:1911.09432 (2019)","DOI":"10.21428\/58320208.d4cd697e"},{"key":"36_CR7","doi-asserted-by":"crossref","unstructured":"Calhoun Jr, T.E., Cao, X., Li, Y., Beyah, R.: An 802.11 MAC layer covert channel. Wirel. Commun. Mob. Comput. 12(5), 393\u2013405 (2012)","DOI":"10.1002\/wcm.969"},{"key":"36_CR8","doi-asserted-by":"crossref","unstructured":"Casenove, M., Miraglia, A.: Botnet over tor: the illusion of hiding. In: 2014 6th International Conference On Cyber Conflict (CyCon 2014), pp. 273\u2013282. IEEE (2014)","DOI":"10.1109\/CYCON.2014.6916408"},{"key":"36_CR9","doi-asserted-by":"crossref","unstructured":"Danezis, G., Goldberg, I.: Sphinx: a compact and provably secure mix format. In: 2009 30th IEEE Symposium on Security and Privacy, pp. 269\u2013282. IEEE (2009)","DOI":"10.1109\/SP.2009.15"},{"key":"36_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-030-51280-4_1","volume-title":"Financial Cryptography and Data Security","author":"F Franzoni","year":"2020","unstructured":"Franzoni, F., Abellan, I., Daza, V.: Leveraging bitcoin testnet for\u00a0bidirectional botnet command and control systems. In: Bonneau, J., Heninger, N. (eds.) FC 2020. LNCS, vol. 12059, pp. 3\u201319. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-51280-4_1"},{"key":"36_CR11","doi-asserted-by":"crossref","unstructured":"Frkat, D., Annessi, R., Zseby, T.: Chainchannels: private botnet communication over public blockchains. In: IEEE ITHINGS-GREENCOM-CPSCOM-SMARTDATA 2018, pp. 1244\u20131252. IEEE (2018)","DOI":"10.1109\/Cybermatics_2018.2018.00219"},{"key":"36_CR12","unstructured":"Grizzard, J.B., Sharma, V., Nunnery, C., Kang, B.B., Dagon, D.: Peer-to-peer botnets: overview and case study. In: HotBots 2007, p. 1 (2007)"},{"issue":"9","key":"36_CR13","doi-asserted-by":"publisher","first-page":"1098","DOI":"10.1109\/JRPROC.1952.273898","volume":"40","author":"DA Huffman","year":"1952","unstructured":"Huffman, D.A.: A method for the construction of minimum-redundancy codes. Proc. IRE 40(9), 1098\u20131101 (1952)","journal-title":"Proc. IRE"},{"key":"36_CR14","unstructured":"Learning Labs: Bolt #4: onion routing protocol (2019). https:\/\/github.com\/lightningnetwork\/lightning-rfc\/blob\/master\/04-onion-routing.md"},{"key":"36_CR15","unstructured":"Learning Labs: Lightning network daemon (2019). https:\/\/lightning.engineering"},{"key":"36_CR16","unstructured":"Learning Labs: LND gRPC API reference (2019). https:\/\/api.lightning.community\/"},{"key":"36_CR17","unstructured":"Learning Labs: Sample lnd.conf (2019). https:\/\/github.com\/lightningnetwork\/lnd\/blob\/master\/sample-lnd.conf"},{"key":"36_CR18","unstructured":"Malaika, M.: Botract (2017). https:\/\/sector.ca\/wp-content\/uploads\/presentations17\/Majid-Malaika-Botract_SecTor.pdf"},{"key":"36_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"299","DOI":"10.1007\/978-3-642-24178-9_21","volume-title":"Information Hiding","author":"S Nagaraja","year":"2011","unstructured":"Nagaraja, S., Houmansadr, A., Piyawongwisal, P., Singh, V., Agarwal, P., Borisov, N.: Stegobot: a covert social network botnet. In: Filler, T., Pevn\u00fd, T., Craver, S., Ker, A. (eds.) IH 2011. LNCS, vol. 6958, pp. 299\u2013313. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-24178-9_21"},{"issue":"4","key":"36_CR20","doi-asserted-by":"publisher","first-page":"679","DOI":"10.1093\/comjnl\/bxu063","volume":"58","author":"V Natarajan","year":"2015","unstructured":"Natarajan, V., Sheen, S., Anitha, R.: Multilevel analysis to detect covert social botnet in multimedia social networks. Comput. J. 58(4), 679\u2013687 (2015)","journal-title":"Comput. J."},{"key":"36_CR21","unstructured":"Ollmann, G.: Botnet communication topologies (2009). Accessed 30 Sept 2009"},{"key":"36_CR22","unstructured":"Osuntokun, O.: New draft sphinx send mode for spontaneous payments (2019). https:\/\/github.com\/lightningnetwork\/lnd\/pull\/2455"},{"key":"36_CR23","doi-asserted-by":"crossref","unstructured":"Pantic, N., Husain, M.I.: Covert botnet command and control using Twitter. In: Proceedings of the 31st Annual Computer Security Applications Conference, pp. 171\u2013180. ACM (2015)","DOI":"10.1145\/2818000.2818047"},{"key":"36_CR24","doi-asserted-by":"crossref","unstructured":"Pass, R., et al.: Micropayments for decentralized currencies. In: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, pp. 207\u2013218. ACM (2015)","DOI":"10.1145\/2810103.2813713"},{"key":"36_CR25","unstructured":"Pirozzi, A., Paganini, P.: Experts presented botchain, the first fully functional botnet built upon the bitcoin protocol (2018). https:\/\/securityaffairs.co\/wordpress\/77395\/malware\/botchain-botnet-bitcoin-protocol.html"},{"key":"36_CR26","unstructured":"Poon, J., Dryja, T.: The bitcoin lightning network: scalable off-chain instant payments (2015). https:\/\/lightning.network\/lightning-network-paper.pdf"},{"key":"36_CR27","unstructured":"Roffel, D., Garrett, C.: A novel approach for computer worm control using decentralized data structures (2014)"},{"issue":"2","key":"36_CR28","doi-asserted-by":"publisher","first-page":"378","DOI":"10.1016\/j.comnet.2012.07.021","volume":"57","author":"SS Silva","year":"2013","unstructured":"Silva, S.S., Silva, R.M., Pinto, R.C., Salles, R.M.: Botnets: a survey. Comput. Netw. 57(2), 378\u2013403 (2013)","journal-title":"Comput. Netw."},{"key":"36_CR29","unstructured":"Sweeny, J.: Botnet resiliency via private blockchains (2017). https:\/\/www.sans.org\/reading-room\/whitepapers\/covert\/botnet-resiliency-private-blockchains-38050"},{"key":"36_CR30","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1007\/978-3-319-22906-5_4","volume-title":"Trust, Privacy and Security in Digital Business","author":"Z Tsiatsikas","year":"2015","unstructured":"Tsiatsikas, Z., Anagnostopoulos, M., Kambourakis, G., Lambrou, S., Geneiatakis, D.: Hidden in plain sight. SDP-based covert channel for botnet communication. In: Fischer-H\u00fcbner, S., Lambrinoudakis, C., Lopez, J. (eds.) TrustBus 2015. LNCS, vol. 9264, pp. 48\u201359. Springer, Cham (2015). https:\/\/doi.org\/10.1007\/978-3-319-22906-5_4"},{"key":"36_CR31","doi-asserted-by":"crossref","unstructured":"Wang, P., Wu, L., Aslam, B., Zou, C.C.: A systematic study on peer-to-peer botnets. In: 2009 Proceedings of 18th International Conference on Computer Communications and Networks, pp. 1\u20138. IEEE (2009)","DOI":"10.1109\/ICCCN.2009.5235360"},{"key":"36_CR32","unstructured":"Zohar, O.: Unblockable chains (2018). https:\/\/github.com\/platdrag\/UnblockableChains"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2020"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-59013-0_36","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,11]],"date-time":"2025-09-11T22:06:09Z","timestamp":1757628369000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-59013-0_36"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030590123","9783030590130"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-59013-0_36","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"13 September 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Guildford","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"United Kingdom","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 September 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 September 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/esorics2020.sccs.surrey.ac.uk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"366","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"72","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"20% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3,16","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"9,1","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"The conference was held virtually due to the COVID-10 pandemic.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}