In this work we discuss some new techniques used by intruders to control a group of compromised machines (botnets).It is also shown how honeynets can be used to identify, monitor and understand current botnets behavior.We outline a real case of compromise, detailing analysis techniques specially developed for botnets study, including the tools, the topology and strategies adopted, as well as the results obtained in the use of honeynets to identify botnets.
No takes yet. Share an insight, caveat, or question.
Sacchetin et al. (2008) studied this question.
Synapse has enriched 5 related papers. Consider them for comparative context: