OnionBots: Subverting Privacy Infrastructure for Cyber Attacks

摘要: Over the last decade botnets survived by adopting a sequence of increasingly sophisticated strategies to evade detection and take overs, monetize their infrastructure. At same time, success privacy infrastructures such as Tor opened door illegal activities, including botnets, ransomware, marketplace for drugs contraband. We contend that next waves will extensively attempt subvert infrastructure cryptographic mechanisms. In this work we propose preemptively investigate design mitigation botnets. first, introduce OnionBots, what believe be generation resilient, stealthy OnionBots use cyber attacks completely decoupling operation from infected host IP address carrying traffic does not leak information about its source, destination, nature. Such bots live symbiotically within detection, measurement, scale estimation, observation, in general all IP-based current techniques. Furthermore, show with an adequate self-healing network maintenance scheme, is simple implement, can achieve low diameter degree robust partitioning under node deletions. develop technique, called SOAP, neutralizes nodes basic OnionBots. light potential research community should proactively methods thwart potentially making adjustments