Toward botnet mesocosms

1st Workshop on Hot Topics in Understanding Botnets, HotBots 2007

Volumn , Issue , 2007, Pages

  Barford, Paul ^a   Blodgett, Mike ^a  

^a UNIVERSITY OF WISCONSIN MADISON   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DIGITAL LIBRARIES; PETROLEUM RESERVOIR EVALUATION; TESTBEDS;

BOTNET MEASUREMENTS; BUILDING USERS; COMMAND AND CONTROL; IN-DEPTH UNDERSTANDING; INDIVIDUAL SYSTEMS; MANAGEMENT FUNCTIONS; NETWORK TESTBEDS; SOURCE CODES;

BOTNET;

EID: 85093835044     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (46)

1. J. Markoff, “Attack of the Zombie Computers is a Growing Threat, Experts Say,” New York Times, January 2007.
2. I. Cook, “Security Matters: Beware the Enemy Within,” Financial Times, February 2007.
3. J. Kirk, “Botnets Shrinking in Size, Harder to Trace,” InfoWorld.com, January 2006.
4. A. Gostev, “Malware Evolution: January - March, 2005,” http://www.viruslist.com, 2005.
5. D. Kawamoto, “Bots Slim Down to get Tough,” CNET News.com, November 2005.
6. J. Evers, “Dutch Police Nab Suspected Bot Herders,” CNET News.com, October 2005.
7. T. Weber, “Criminals May Overwhelm the Web,” http://news.bbc.co.uk/2/hi/business/6298641.stm, January 2007.
8. “California Man Charged in Botnet Attacks,” Reuters, November 2005.
9. I. Thomson, “Hackers Fight to Create Worlds Largest Botnet,” http://www.vnunet.com, August 2005.
10. D. Verton, “Organized Crime Invades Cyberspace,” http://www.computerworld.com, August 2004.
11. ISI, “The Deterlab Network Security Testbed based on Emulab,” http://www.deterlab.net, 2007.
12. U. of Wisconsin, “The Wisconsin Advanced Internet Laboratory,” http://wail.cs.wisc.edu, 2007.
13. U. of Utah, “The Emulab Network Emulation Testbed,” http://www.emulab.net, 2002.
14. P. Bacher and T. Holz and M. Kotter and G. Wicherski, “Know Your Enemy: Tracking Botnets,” http://www.honeynet.org/papers/bots, March 2005.
15. P. Barford and V. Yegneswaran, An Inside Look at Botnets, ser. Advances in Information Security, Malware Detection. Springer, 2007, vol. 27.
16. “The Honeynet Project,” http://project.honeynet.org, 2003.
17. D. Dagon, C. Zou, and W. Lee, “Modeling Botnet Propagation Using Time Zones,” in Proceedings of The Network and Distributed Systems Security Symposium (NDSS'06), San Diego, CA, February 2006.
18. A. Ramachandran, N. Feamster, and D. Dagon, “Revealing Botnet Membership Using DNSBL Counter-Intelligence,” in Proceedings of The USENIX Workshop on Steps to Reducing Unwanted Traffic in the Internet (SRUTI'06), San Jose, CA, July 2006.
19. M. Bailey, E. Cooke, F. Jahanian, J. Nazario, and D. Watson, “The Internet Motion Sensor: A Distributed Blackhole Monitoring System,” in Proceedings of The Network and Distributed Security Symposium (NDSS'05), San Diego, CA, January 2005.
20. V. Yegneswaran, P. Barford, and D. Plonka, “On the Design and Use of Internet Sinks for Network Abuse Monitoring,” in Proceedings of Recent Advances on Intrusion Detection (RAID'04), Sophia, France, September 2004.
21. R. Pang, V. Yegneswaran, P. Barford, V. Paxson, and L. Peterson, “Characteristics of internet background radiation,” in Proceedings of ACM Internet Measurement Conference (IMC'04), Taormina, Italy, October 2004.
22. “The Nepenthes Low Interaction Honeypot,” http://nepenthes.mwcollect.org, 2007.
23. M. Vrable, J. Ma, J. Chen, D. Moore, E. Vandekieft, A. Snoeren, G. Voelker, and S. Savage, “Scalability, fidelity and containment in the potemkin virtual honeyfarm,” in Proceedings of ACM Symposium on Operating Systems Principles (SOSP'05), Brighton, England, October 2005.
24. M. Rajab, J. Zarfoss, F. Monrose, and A. Terzis, “A multifaceted approach to understanding the botnet phenomenon,” in Proceedings of ACM Internet Measurement Conference, Rio de Janerio, Brazil, November 2006.
25. F. Freiling, T. Holz, and G. Wicherski, “Botnet Tracking: Exploring a Root-Cause Methodology to Prevent Distributed Denial-of-Service Attacks,” in Proceedings of The 10th European Symposium on Research in Computer Security (ESORICS'05), September 2005.
26. E. Cooke, F. Jahanian, and D. McPherson, “The zombie roundup: Understanding, detecting and disrupting botnets,” in Proceedings of Usenix Workshop on Stepts to Reducing Unwanted Traffic on the Internet (SRUTI'05), Cambridge, MA, July 2005.
27. B. Krishnamurthy, “MoHonk: Mobile Honeypots to Trace Unwanted Traffic Early,” in Proceedings of The ACM SIGCOMM Network Troubleshooting Workshop, Portland, OR, September 2004.
28. M. Allman, E. Blanton, V. Paxson, and S. Shenker, “Fighting Coordinated Attackers with Cross-Organizational Information Sharing,” in Proceedings of The Fifth Workshop on Hot Topics in Networks (HotNets '06), Irvine, CA, November 2004.
29. “The IDA Pro Disassembler and Debugger,” http://www.datarescue.com, 2007.
30. “The SoftICE Driver Suite,” http://www.compuware.com, 2005.
31. M. Russinovich and B. Cogswell, “Sysinternals,” http://www.sysinternals.com, 2007.
32. “Honeynet Scan of the Month 32,” http://www.honeynet.org/scans/scan32/, 2005.
33. Coverity, “Coverity Prevent,” http://www.coverity.com, 2005.
34. P. Cousot, R. Cousot, J. Feret, L. Mauborgne, A. Mine, D. Monniaux, and X. Rival, “The Astree Static Analyzer,” http://www.astree.ens.fr, 2005.
35. N. Weaver, I. Hamadeh, G. Kesidis, and V. Paxson, “Preliminary results using scale-down to explore worm dynamics,” in Proceedings of ACM Workshop on Rapid Malcode (WORM'04), Washington D.C., October 2004.
36. “The Norman Sandbox,” http://sandbox.norman.no, 2007.
37. “The Sunbelt CWSandbox,” http://www.sunbelt-software.com/SunbeltCWSandbox.cfm, 2007.
38. P. Ferrie, “Attacks on Virtual Machines,” in Proceedings of AVAR Conference'06, Auckland, NZ, December 2006.
39. “Offensive Computing,” http://www.offensivecomputing.net, 2007.
40. MITRE, “Common Malware Enumeration,” http://cme.mitre.org, 2007.
41. C. Kalt, “Internet Relay Chat: Client Protocol,” RFC 2812 (Informational), April 2007.
42. “IRCD-Hybrid,” http://ircd-hybrid.com, 2007.
43. J. Sommers and P. Barford, “Self-Configuring Network Traffic Generation,” in Proceedings of ACM Internet Measurement Conference (IMC '04), Taormina, Italy, October 2004.
44. Y. Rekhter, B. Moskowitz, D. Karrenberg, G. de Groot, and E. Lear, “Address Allocation for Private Internets,” Internet RFC 1918, February 1996.
45. S. Agarwal, J. Sommers, and P. Barford, “Scalable Network Path Emulation,” in Proceedings of The IEEE International Symposium on Modeling, Analysis and Simulation of Computer and Telecommunication Systems (MASCOTS'05), San Diego, CA, September 2005.
46. M. Livny, “Condor: High Throughput Computing,” http://www.cs.wisc.edu/condor, 2007.