Insights from the inside: A view of botnet management from infiltration

LEET 2010 - 3rd USENIX Workshop on Large-Scale Exploits and Emergent Threats: Botnets, Spyware, Worms, and More

Volumn , Issue , 2010, Pages

  Cho, Chia Yuan ^a   Caballero, Juan ^a,b   Grier, Chris ^a   Paxson, Vern ^a,c   Song, Dawn ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b CARNEGIE MELLON UNIVERSITY   (United States)

^c ICSI   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ARCHITECTURE; COMPUTER VIRUSES; PERSONAL COMPUTING; REVERSE ENGINEERING;

GOOGLE HACKING; INFILTRATION TECHNIQUES; MANAGEMENT STRUCTURE;

BOTNET;

EID: 85084097075     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (16)

1. Botnetweb. http://blog.fireeye.com/research/2009/04/botnetweb.htm.
2. Killing the beast...part 4 (ozdok). http://blog.fireeye.com/research/2009/11/ killing- the- beastpart- 4.html.
3. Mega-d. http://www.m86security.com/trace/i/ Mega- D, spambot.896.asp.
4. Mega-d botnet returns after mccolo shutdown. http://www.darkreading.com/security/attacks/ showArticle.jhtml?articleID=212300170.
5. Mega-d botnet takes a hit. http://www.m86security.com/labs/traceitem.asp?article=1161.
6. Tracking spam botnets. http://www.m86security.com/labs/bot_statistics.asp.
7. Roger Dingledine, Nick Mathewson, and Paul Syverson. Tor: The second-generation onion router. In Proc. USENIX Security, 2004.
8. Chris Kanich et al. The Heisenbot uncertainty problem: Challenges in separating bots from chaff. In Proc. LEET, 2008.
9. Chris Kanich et al. Spamalytics: An empirical analysis of spam marketing conversion. In ACM CCS, October 2008.
10. Christian Kreibich et al. Spamcraft: An inside look at spam campaign orchestration. In Proc. LEET, 2009.
11. Juan Caballero et al. Dispatcher: Enabling active botnet infiltration using automatic protocol reverse-engineering. In ACM CCS, 2009.
12. Juan Caballero et al. Binary code extraction and interface identification for security applications. In Proc. NDSS, February 2010.
13. Thorsten Holz et al. Measurements and mitigation of peer-to-peer-based botnets: A case study on Storm worm. In Proc. LEET, 2008.
14. John P. John, Alexander Moshchuk, Steven D. Gribble, and Arvind Krishnamurthy. Studying spamming botnets using Botlab. In Proc. USENIX NSDI, 2009.
15. Atif Mushtaq. Personal communication, March 2010.
16. Moheeb Abu Rajab, Jay Zarfoss, Fabian Monrose, and Andreas Terzis. A multifaceted approach to understanding the botnet phenomenon. In Internet Measurement Conference, October 2006.