A multifaceted approach to understanding the botnet phenomenon

Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC

Volumn , Issue , 2006, Pages 41-52

  Abu Rajab, Moheeb ^a   Zarfoss, Jay ^a   Monrose, Fabian ^a   Terzis, Andreas ^a  

^a Johns Hopkins University   (United States)

Author keywords

Botnets; Computer security; Malware; Network security

Indexed keywords

DISTRIBUTED COMPUTER SYSTEMS; INFORMATION TECHNOLOGY; MATHEMATICAL MODELS; TRACKING (POSITION); UNCERTAINTY ANALYSIS;

BOTNET PHENOMENON; BOTNET-RELATED SPREADING ACTIVITY; DISTRIBUTED COMPUTING PLATFORMS; MALWARE;

NETWORK SECURITY;

EID: 34547399387     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1177080.1177086     Document Type: Conference Paper

References (24)

1. Paul Baecher, Thorsten Holz, Markus Kötter, and Georg Wicherski. The Malware Collection Tool (mwcollect). Available at http://www.mwcollect.org/.
2. th International Symposium on Recent Advances in Intrusion Detection (RAID), Sept. 2006.
3. Paul Barford and Vinod Yagneswaran. An Inside Look at Botnets. To appear in Series: Advances in Information Security, Springer, 2006.
4. Clam AntiVirus. Available at http://www.clamav.net/.
5. Evan Cooke, Farnam. Jahanian, and Danny McPherson. The Zombie Roundup: Understanding, Detecting, and Disturbing Botnets. In Proceedings of the first Workshop on Steps to Reducing Unwanted Traffic on the Internet (STRUTI), pages 39-44, July 2005.
6. th Network and Distributed System Security Symposium NDSS, February 2006.
7. Edward. W. Felten and. Michael A. Schneider. Timing attacks on web privacy. In CCS '00: Proceedings of the 7th ACM conference on Computer and communications security, pages 25-32, New York, NY, USA, 2000. ACM Press.
8. th European Symposium on Research in Computer Security, ESORICS, pages 319-335, September 2005.
9. Luis Grangeia. DNS Cache Snooping or Snooping the Cache for Fun and Profit, Available at http://www.sysvalue.com/papers/DNS-Cache-Snooping/files/ DNS.Cache.Snooping_1.1.pdf, 2004.
10. Honeyd Virtual Honeypot Framework, http://www.honeyd.org/.
11. IP2LOCATION, Bringing Geography to the Internet. Available at http://www.ip21ocation.com/.
12. M. St. Johns. RFC 1413: Identification protocol, January 1993.
13. C. Kalt. Internet Relay Chat: Client Protocol. RFC 28.12 (Informational), April 2000.
14. Dan Kaminsky. Welcome to Planet Sony, http://www.doxpara.com/.
15. Eddie Kohler, Robert Monis, Benjie Chen, John Jannotti, and M.Frans Kaashoek. The Click Modular Router. ACM Transactions on Computer Systems, 18(3):263-297, 2000.
16. Willaim Metcalf. Snort In-line. Available at http://snort-inline. sourceforge.net/.
17. th International World Wide Web (WWW) Conference, pages 1-12, 2004.
18. Larry Peterson, Tom Anderson, David Culler, and Timothy Roscoe. A Blueprint for Introducing Disruptive Technology into the Internet. SIGCOMM Computer Communication Reviews, 33(1):59-64, 2003.
19. Honeynet Project and Research Alliance. Know your enemy: Tracking Botnets, March 2005. See http://www.honeynet.org/papers/bots/.
20. Niels Provos. A virtual honeypot framework. In Proceedings of the USENIX Security Symposium, pages 1-14, August 2004.
21. Jeremy Sugerman, Ganesh Venkitachalam, and Beng-Hong Lim. Virtualizing I/O Devices on VMware Workstation's Hosted Virtual Machine Monitor. In USENLX Annual Technical Conference, 2001. Available at http://www.vmware.com/.
22. The UnrealIRC Team. Unrealircd. See http://www.unrealircd.com.
23. Michael Vrable, Justin Ma, Jay Chen, David Moore, Erik Vandekieft, Alex C. Snoeren, Geoffrey M. Voelker, and Stefan Savage. Scalability, Fidelity and Containment in the Potemkin Virtual Honeyfarm. Proceedings of ACM SIGOPS Operating System Review, 39(5):148-162, 2005.
24. th Annual Network and Distributed System Security Symposium (NDSS), San Diego, CA, Feb 2006.