Eric.freyssinet: 1 revision imported

2015-02-07T14:24:33Z

1 revision imported

← Older revision		Revision as of 14:24, 7 February 2015
(No difference)

Eric.freyssinet at 14:39, 20 August 2012

2012-08-20T14:39:42Z

New page

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://ossectools.blogspot.fr/2012/05/multitenancy-botnets-thwart-threat.html ossectools.blogspot.fr
|Author=Martin,
|NomRevue=Open-Source Security Tools Blog
|Date=Wednesday, May 9, 2012
|Editor=Open-Source Security Tools
|Year=2012
|ISBN=
|Page=
|Abstract=Multitenancy Botnets Thwart Threat Analysis
There was a great thread on the EmergingThreats.net mailing list today regarding writing IDS signatures for a recent botnet communications channel. This a very typical topic for discussion on the list, but in researching possible signatures, I found some surprisingly easy to observe communication of a compromised asset with is controller which shows how difficult it is to parameterize the threat of a given botnet. Even labeling a botnet has grown extremely difficult as the codebases for each botnet are so intertwined that the tell-tale characteristics of each one blend until there's little distinction between them. This makes attribution of attacks very difficult and provides a fair amount of anonymity through abstraction to the botnet masters.
|Botnet=,
|Malware=,
|CCProtocol=,
|Operation=,
|Keyword=,
}}

Multitenancy Botnets thwart threat analysis - Revision history

Eric.freyssinet: 1 revision imported

Eric.freyssinet at 14:39, 20 August 2012