Receive suspicious host list from Tor traffic detection unit

Collect incoming traffic of suspicious hosts

1

Refine and extract suspicious host flows and convert to images

2

Check for bot traffic in incoming suspicious host traffic

3

Is it bot traffic?

Introduce suspicious hosts to detection unit and block directing proxy

4

Report no directing proxy found in suspicious hosts