Design of SMS commanded-and-controlled and P2P-structured mobile botnets

WiSec'12 - Proceedings of the 5th ACM Conference on Security and Privacy in Wireless and Mobile Networks

Volumn , Issue , 2012, Pages 137-148

  Zeng, Yuanyuan ^a   Shin, Kang G ^b   Hu, Xin ^c  

^a Perimeter E Security   (United States)

^b UNIVERSITY OF MICHIGAN   (United States)

^c IBM RESEARCH   (United States)

Author keywords

Malware; Mobile botnets; Smartphone security

Indexed keywords

BOTNETS; MALWARES; MOBILE SERVICE; P2P STRUCTURE; SECURITY THREATS; SMS MESSAGES;

GLOBAL SYSTEM FOR MOBILE COMMUNICATIONS; PERSONAL COMPUTERS; TELEPHONE SETS; TOPOLOGY;

SMARTPHONES;

EID: 84860677644     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2185448.2185467     Document Type: Conference Paper

References (36)

1. "Google yanks over 50 infected apps from android market, " http://www.computerworld.com/s/article/9212598/ Googleyanksover50infectedappsfromAndroidMarket.
2. SymbOS.Exy.A, http://www.symantec.com/securityresponse/writeup.jsp?docid= 2009-022010-4100-99.
3. Ikee.B, http://www.symantec.com/securityresponse/writeup.jsp?docid=2009- 112217-4458-99.
4. "More droiddream details emerge: It was building a mobile botnet, " http://www.readwriteweb.com/archives/ droiddreammalwarewasgoingtoinstallmoreappsonyourphone.php.
5. RootSmart, http://www.csc.ncsu.edu/faculty/jiang/RootSmart/.
6. P. Wang, S. Sparks, and C. C. Zou, "An advanced hybrid peer-to-peer botnet, " in HotBots'07.
7. P. Wang, L. Wu, B. Aslam, and C. C. Zou, "A systematic study on peer-to-peer botnets, " in ICCCN 2009.
8. G. Starnberger, C. Kruegel, and E. Kirda, "Overbot - a botnet protocol based on kademlia, " in SECURECOMM 2008.
9. C. R. Davis, S. Neville, J. M. Fernandez, J.-M. Robert, and J. McHugh, "Structured peer-to-peer overlay networks: Ideal botnets command and control infrastructures?" in Proceedings of 13th European Symposium on Research in Computer Security (ESORICS'08).
10. K. Singh, A. Srivastava, J. Giffin, and W. Lee, "Evaluating email's feasibility for botnet command and control, " in Proceedings of 38th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN'08).
11. A. Nappa, A. Fattori, M. Balduzzi, M. Dell'Amico, and L. Cavallaro, "Take a deep breath: A stealthy, resilient and cost-effective botnet using skype, " in Proceedings of 7th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA'10).
12. D. Dagon, G. Gu, C. P. Lee, and W. Lee, "A taxonomy of botnet structures, " in Proceedings of the 23 Annual Computer Security Applications Conference (ACSAC'07).
13. A. Bose and K. G.Shin, "On mobile viruses exploiting messaging and bluetooth services, " in Proceedings of the 2nd International Conference on Security and Privacy in Communication Networks (SecureComm'06).
14. R. Racic, D. Ma, and H. Chen, "Exploiting mms vulnerabilities to stealthily exhaust mobile phone's battery, " in Proceedings of the 2nd International Conference on Security and Privacy in Communication Networks (SecureComm'06).
15. W. Enck, P. Traynor, P. McDaniel, and T. L. Porta, "Exploiting open functionality in sms-capable cellular networks, " in Proceedings of the 12th ACM Conference on Computer and Communications Security (CCS'05).
16. P.Traynor, M.Lin, M.Ongtang, V.Rao, T.Jaeger, P.McDaniel, and T.L.Porta, "On cellular botnets: Measuring the impact of malicious devices on a cellular network core, " in Proceedings of the 12th ACM Conference on Computer and Communications Security (CCS'09).
17. K. Singh, S. Sangal, N. Jain, P. Traynor, and W. Lee, "Evaluating bluetooth as a medium for botnet command and control, " in Proceedings of the International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA 2010).
18. J. Hua and K. Sakurai, "A sms-based mobile botnet using flooding algorithm, " in The 5th Workshop in Information Security and Privacy (WISTP'11).
19. C. Mulliner and J.-P. Seifert, "Rise of the ibots: 0wning a telco network, " in The 5th IEEE International Conference on Malicious and Unwanted Software (Malware), 2010.
20. G. Weidman, "Transparent botnet command and control for smartphones over sms, " in Shmoocon 2011.
21. "Htc bluetooth vulnerability, " http://www.cio.com/article/ 497146/HTCSmartphonesLeftVulnerabletoBluetoothAttack.
22. C.Mulliner and C.Miller, "Fuzzing the phone in your phone, " in BlackHat Security Conference, 2009.
23. SMS, http://en.wikipedia.org/wiki/SMS.
24. "China cracks down on sms spam, " http://www.redherring.com/ Home/19081.
25. textPlus, http://www.textplus.com/.
26. Textfree, http://itunes.apple.com/us/app/textfreeunlimited-send-text/ id305925151?mt=8.
27. "Gsma launches sms spam reporting service, " http://www.pcworld.com/businesscenter/article/192469/ gsmalaunchessmsspamreportingservice.html.
28. P. Maymounkov and D. Mazieres, "Kademlia: A peer-to-peer information system based on the xor metric, " in IPTPS, 2002.
29. Y. Chawathe, S. Ratnasamy, L. Breslau, N. Lanham, and S. Shenker, "Making gnutellalike p2p systems scalable, " in ACM SIGCOMM, 2003.
30. I. Stoica, R. Morris, D. Karger, M. F. Kaashoek, and H. Balakrishnan, "Chord: A scalable peer-to-peer lookup service for internet applications, " in ACM SIGCOMM 2001.
31. OverSim, http://www.oversim.org/.
32. "Sms market statistics 2009, " http://www.massmailsoftware.com/ blog/2010/04/sms-market-statistics-2009-know-your-customer/.
33. "Mobile phone spam, " http://en.wikipedia.org/wiki/ Mobilephonespam.
34. "Researcher says app store open to malware"http://www. iphonealley.com/current/researcher-saysapp-store-open-to-malware.
35. W. Enck, M. Ongtang, and P. McDaniel, "On lightweight mobile phone application certification, " in Proceedings of the 16th ACM conference on Computer and communications security (CCS'09).
36. G. Yan, S. Eidenbenz, and E. Galli, "Sms-watchdog: Profiling social behaviors of sms users for anomaly detection, " in Proceedings of the 12th International Symposium on Recent Advances in Intrusion Detection (RAID'09).