The Zombie roundup: understanding, detecting, and disrupting botnets

摘要: Global Internet threats are undergoing a profound transformation from attacks designed solely to disable infrastructure those that also target people and organizations. Behind these new is large pool of compromised hosts sitting in homes, schools, businesses, governments around the world. These systems infected with bot communicates controller other bots form what commonly referred as zombie army or botnet. Botnets very real quickly evolving problem still not well understood studied. In this paper we outline origins structure botnets use data operator community, Motion Sensor project, honeypot experiment illustrate botnet today. We then study effectiveness detecting by directly monitoring IRC communication command control activity show more comprehensive approach required. conclude describing system detect utilize advanced correlating secondary detection multiple sources.