An advanced hybrid peer-to-peer botnet

From Botnets.fr
Jump to: navigation, search

(Publication) Link to the old Wiki page : [1] / Google search: [2]

An advanced hybrid peer-to-peer botnet
Botnet Slapper, Sinit, Phatbot, Nugache
Malware
Botnet/malware group
Exploit kits
Services
Feature
Distribution vector
Target
Origin
Campaign
Operation/Working group
Vulnerability
CCProtocol P2P
Date 2007 /
Editor/Conference School of Electrical Engineering and Computer Science University of Central Florida
Link http://static.usenix.org/event/hotbots07/tech/full_papers/wang/wang.pdf (Archive copy)
Author Ping Wang, Sherri Sparks, Cliff C. Zou
Type

Abstract

A “botnet” consists of a network of compromised computers controlled by an attacker (“botmaster”). Recently botnets have become the root cause of many Internet attacks. To be well prepared for future attacks, it is not enough to study how to detect and defend against the botnets that have appeared in the past. More importantly, we should study advanced botnet designs that could be developed by botmasters in the near future. In this paper, we present the design of an advanced hybrid peerto-peer botnet. Compared with current botnets, the proposed botnet is harder to be shut down, monitored, and hijacked. It provides robust network connectivity, individualized encryption and control traffic dispersion, limited botnet exposure by each bot, and easy monitoring and recovery by its botmaster. Possible defenses against this advanced botnet are suggested.

Bibtex

 @misc{Wang2007BFR904,
   editor = {School of Electrical Engineering and Computer Science University of Central Florida},
   author = {Ping Wang, Sherri Sparks, Cliff C. Zou},
   title = {An advanced hybrid peer-to-peer botnet},
   date = {19},
   month = Jan,
   year = {2007},
   howpublished = {\url{http://static.usenix.org/event/hotbots07/tech/full_papers/wang/wang.pdf}},
 }