Analysis of Peer-to-Peer Botnet Attacks and Defenses

摘要: A “botnet” is a network of computers that are compromised and controlled by an attacker (botmaster). Botnets one the most serious threats to today’s Internet. Most current botnets have centralized command control (C&C) architecture. However, peer-to-peer (P2P) structured gradually emerged as new advanced form botnets. Due distributive nature P2P networks, more resilient defense countermeasures. In this chapter, first we systematically study along multiple dimensions: bot candidate selection, construction, C&C communication mechanisms/protocols, mitigation approaches. Then provide mathematical analysis two botnet elimination approaches—index poisoning Sybil defense, monitoring technique—passive based on infiltrated honeypots or captured bots. Simulation experiments show our accurate.