Bots & Botnets - Revision history

Rosard at 23:46, 12 April 2009

2009-04-12T23:46:05Z

← Older revision		Revision as of 23:46, 12 April 2009
Line 285:		Line 285:
	--[[User:SJakubowski\|SJakubowski]] 23:17, 13 April 2008 (EDT)		--[[User:SJakubowski\|SJakubowski]] 23:17, 13 April 2008 (EDT)
	<br>		<br>
-	--[[User:Rosard\|Rosard]] 09:49, 12 April 2009 (EDT)	+	--[[User:Rosard\|Rosard]] 19:49, 12 April 2009 (EDT)

Rosard at 18:29, 12 April 2009

2009-04-12T18:29:41Z

Show changes

Rosard at 13:49, 12 April 2009

2009-04-12T13:49:37Z

← Older revision		Revision as of 13:49, 12 April 2009
Line 16:		Line 16:
	[[Image:Vk bb 0508 pic02.png]]		[[Image:Vk bb 0508 pic02.png]]
	=== Life cycle of a Botnet ===		=== Life cycle of a Botnet ===
-	[[Image:Untitled-1.jpg\|right\|200px\|Schematic time line of a Botnet]]	+	[[Image:Untitled-1.jpg\|right\|200px\|frame\|Schematic time line of a Botnet]]
	* Initial setup of configuration settings of the Bot parameters such as infection vectors, payload, stealth, C&C details		* Initial setup of configuration settings of the Bot parameters such as infection vectors, payload, stealth, C&C details
	* Register a dynamic [[DNS]] ([[DDNS]])		* Register a dynamic [[DNS]] ([[DDNS]])
Line 285:		Line 285:
	--[[User:SJakubowski\|SJakubowski]] 23:17, 13 April 2008 (EDT)		--[[User:SJakubowski\|SJakubowski]] 23:17, 13 April 2008 (EDT)
	<br>		<br>
-	--[[User:Rosard\|Rosard]] 10:46, 11 April 2009 (EDT)	+	--[[User:Rosard\|Rosard]] 09:49, 12 April 2009 (EDT)

Rosard: /* Life cycle of a Botnet */

2009-04-12T13:47:41Z

Life cycle of a Botnet

← Older revision		Revision as of 13:47, 12 April 2009
Line 16:		Line 16:
	[[Image:Vk bb 0508 pic02.png]]		[[Image:Vk bb 0508 pic02.png]]
	=== Life cycle of a Botnet ===		=== Life cycle of a Botnet ===
-	[[Image:Untitled-1.jpg\|right\|~~250px~~\|Schematic ~~timeline~~ of a Botnet]]	+	[[Image:Untitled-1.jpg\|right\|200px\|Schematic time line of a Botnet]]
	* Initial setup of configuration settings of the Bot parameters such as infection vectors, payload, stealth, C&C details		* Initial setup of configuration settings of the Bot parameters such as infection vectors, payload, stealth, C&C details
	* Register a dynamic [[DNS]] ([[DDNS]])		* Register a dynamic [[DNS]] ([[DDNS]])

Rosard: /* Life cycle of a Botnet */

2009-04-12T13:45:22Z

Life cycle of a Botnet

← Older revision		Revision as of 13:45, 12 April 2009
Line 16:		Line 16:
	[[Image:Vk bb 0508 pic02.png]]		[[Image:Vk bb 0508 pic02.png]]
	=== Life cycle of a Botnet ===		=== Life cycle of a Botnet ===
-	[[Image:Untitled-1.jpg\|right\|~~thumb~~\| ~~Detailed~~ timeline of a Botnet]]	+	[[Image:Untitled-1.jpg\|right\|250px\|Schematic timeline of a Botnet]]
	* Initial setup of configuration settings of the Bot parameters such as infection vectors, payload, stealth, C&C details		* Initial setup of configuration settings of the Bot parameters such as infection vectors, payload, stealth, C&C details
	* Register a dynamic [[DNS]] ([[DDNS]])		* Register a dynamic [[DNS]] ([[DDNS]])

Rosard: /* External Links */

2009-04-12T13:42:18Z

External Links

← Older revision		Revision as of 13:42, 12 April 2009
Line 275:		Line 275:
	* [http://www.builderau.com.au/news/soa/Escalating-DoS-attacks-may-shut-down-the-Internet-/0,339028227,339282392,00.htm?feed=pt_denial_of_service DoS may shut down the Internet],DoS can shut down the internet		* [http://www.builderau.com.au/news/soa/Escalating-DoS-attacks-may-shut-down-the-Internet-/0,339028227,339282392,00.htm?feed=pt_denial_of_service DoS may shut down the Internet],DoS can shut down the internet
	* [http://www.builderau.com.au/news/soa/A-million-zombies-threaten-US-national-security/0,339028227,339278685,00.htm?feed=pt_denial_of_service A million zombies threaten US national security], A million zombies threaten US national security		* [http://www.builderau.com.au/news/soa/A-million-zombies-threaten-US-national-security/0,339028227,339278685,00.htm?feed=pt_denial_of_service A million zombies threaten US national security], A million zombies threaten US national security
-	* [www.symantec.com Symantec], Symantec	+	* [http://www.symantec.com/index.jsp Symantec], Symantec
-	* [http://idgnow.uol.com.br/seguranca/2007], Internet Attacks on 2007	+	* [http://idgnow.uol.com.br/seguranca/2007 Segurança UOL], Internet Attacks on 2007 (portuguese)

	[[Category:Computer network security]]		[[Category:Computer network security]]

Rosard at 13:41, 12 April 2009

2009-04-12T13:41:06Z

← Older revision		Revision as of 13:41, 12 April 2009
Line 1:		Line 1:
	Each phase our world, has its healthiness’ such it has been with gold, commerce, industry and others on the last centuries. On this XXI century, the main wealth has been around information, and the spread of it. This information has been the key structure of our world's society, economy, health, development and others. This vast information sea has been spread though the [[Internet\|internet network]], which evolved into a magnificent tool of knowledge power on the latest years. Unfortunately, malicious intentioned people have been using this consistent tool for the spread of threats such as [[viruses]], [[Computer worms\|worms]], [[Trojan horses]] and others, again, to obtain confidential and powerful information such as bank accounts user names & passwords, confidential & military information or even CPU power to the increase of the spread of these threats. One powerful way of this spread, has been though Bots that integrate Botnets, which are the main focus on this research. This security breach has been one of the newest and most powerful threats relating to computer security within the last 5 years.		Each phase our world, has its healthiness’ such it has been with gold, commerce, industry and others on the last centuries. On this XXI century, the main wealth has been around information, and the spread of it. This information has been the key structure of our world's society, economy, health, development and others. This vast information sea has been spread though the [[Internet\|internet network]], which evolved into a magnificent tool of knowledge power on the latest years. Unfortunately, malicious intentioned people have been using this consistent tool for the spread of threats such as [[viruses]], [[Computer worms\|worms]], [[Trojan horses]] and others, again, to obtain confidential and powerful information such as bank accounts user names & passwords, confidential & military information or even CPU power to the increase of the spread of these threats. One powerful way of this spread, has been though Bots that integrate Botnets, which are the main focus on this research. This security breach has been one of the newest and most powerful threats relating to computer security within the last 5 years.
-	<br>[[Image:20080923-spam-botnet.jpg]]<br>	+	<br>[[Image:20080923-spam-botnet.jpg\|right\|Bots]]<br>

	== Bot? What is it?? How it works???==		== Bot? What is it?? How it works???==
-	~~[[Image:Talking-trojan.jpg]]~~
	<br>		<br>
	A Bot is a type of malicious software that after successfully invading a machine (called [[Zombie computers]]), usually installed via worms, Trojan horses, or through [[Back doors]], under a common [[command-and-control]](C&C) infrastructure. These new installed malicious software (Most likely to exist in machines that run on [[Windows]] OS (most used OS in the world), which don't have a file-user safe executing system like computers that run on [[Linux]] or [[Mac]] OS) behave like “worm” processes, capable of spreading though the infected machine. The Bot camouflages itself, maintaining a low profile (using the least system resources for example before ordered to attack) and only then, they connect to a communication channel ([[IRC]], [[Web Server]] or [[Peer to Peer File Sharing\|P2P Server]]), allowing the attacker (Bot Herder) full control of this machine though a remote communication channel.		A Bot is a type of malicious software that after successfully invading a machine (called [[Zombie computers]]), usually installed via worms, Trojan horses, or through [[Back doors]], under a common [[command-and-control]](C&C) infrastructure. These new installed malicious software (Most likely to exist in machines that run on [[Windows]] OS (most used OS in the world), which don't have a file-user safe executing system like computers that run on [[Linux]] or [[Mac]] OS) behave like “worm” processes, capable of spreading though the infected machine. The Bot camouflages itself, maintaining a low profile (using the least system resources for example before ordered to attack) and only then, they connect to a communication channel ([[IRC]], [[Web Server]] or [[Peer to Peer File Sharing\|P2P Server]]), allowing the attacker (Bot Herder) full control of this machine though a remote communication channel.
Line 17:		Line 16:
	[[Image:Vk bb 0508 pic02.png]]		[[Image:Vk bb 0508 pic02.png]]
	=== Life cycle of a Botnet ===		=== Life cycle of a Botnet ===
		+	[[Image:Untitled-1.jpg\|right\|thumb\| Detailed timeline of a Botnet]]
	* Initial setup of configuration settings of the Bot parameters such as infection vectors, payload, stealth, C&C details		* Initial setup of configuration settings of the Bot parameters such as infection vectors, payload, stealth, C&C details
	* Register a dynamic [[DNS]] ([[DDNS]])		* Register a dynamic [[DNS]] ([[DDNS]])
Line 148:		Line 148:

	=== Spam ===		=== Spam ===
-	[[Image:Spam2 2.jpg]]	+	[[Image:Spam2 2.jpg\|thumb\|right]]
	A Herder can sell his Botnet services to a spammer. This hides the identity of the spammer as he can have anonymous distribution of his messages though the Bots on the Botnet. Another advantage is the speed. A spammer will also be able to send incredible amounts of messages via the Bots then he normally could. On the table bellow, there is the flow of steps to a Botnet use spam to profit:		A Herder can sell his Botnet services to a spammer. This hides the identity of the spammer as he can have anonymous distribution of his messages though the Bots on the Botnet. Another advantage is the speed. A spammer will also be able to send incredible amounts of messages via the Bots then he normally could. On the table bellow, there is the flow of steps to a Botnet use spam to profit:

Rosard at 13:21, 12 April 2009

2009-04-12T13:21:26Z

← Older revision		Revision as of 13:21, 12 April 2009
Line 1:		Line 1:
-	~~[[Image:20080923-spam-botnet.jpg]]~~
-	~~<br>~~
	Each phase our world, has its healthiness’ such it has been with gold, commerce, industry and others on the last centuries. On this XXI century, the main wealth has been around information, and the spread of it. This information has been the key structure of our world's society, economy, health, development and others. This vast information sea has been spread though the [[Internet\|internet network]], which evolved into a magnificent tool of knowledge power on the latest years. Unfortunately, malicious intentioned people have been using this consistent tool for the spread of threats such as [[viruses]], [[Computer worms\|worms]], [[Trojan horses]] and others, again, to obtain confidential and powerful information such as bank accounts user names & passwords, confidential & military information or even CPU power to the increase of the spread of these threats. One powerful way of this spread, has been though Bots that integrate Botnets, which are the main focus on this research. This security breach has been one of the newest and most powerful threats relating to computer security within the last 5 years.		Each phase our world, has its healthiness’ such it has been with gold, commerce, industry and others on the last centuries. On this XXI century, the main wealth has been around information, and the spread of it. This information has been the key structure of our world's society, economy, health, development and others. This vast information sea has been spread though the [[Internet\|internet network]], which evolved into a magnificent tool of knowledge power on the latest years. Unfortunately, malicious intentioned people have been using this consistent tool for the spread of threats such as [[viruses]], [[Computer worms\|worms]], [[Trojan horses]] and others, again, to obtain confidential and powerful information such as bank accounts user names & passwords, confidential & military information or even CPU power to the increase of the spread of these threats. One powerful way of this spread, has been though Bots that integrate Botnets, which are the main focus on this research. This security breach has been one of the newest and most powerful threats relating to computer security within the last 5 years.
-	<br>	+	<br>[[Image:20080923-spam-botnet.jpg]]<br>

	== Bot? What is it?? How it works???==		== Bot? What is it?? How it works???==

Rosard at 13:20, 12 April 2009

2009-04-12T13:20:41Z

← Older revision		Revision as of 13:20, 12 April 2009
Line 1:		Line 1:
-	[[Image:20080923-spam-botnet.jpg]]	+	[[Image:20080923-spam-botnet.jpg]]
	<br>		<br>
	Each phase our world, has its healthiness’ such it has been with gold, commerce, industry and others on the last centuries. On this XXI century, the main wealth has been around information, and the spread of it. This information has been the key structure of our world's society, economy, health, development and others. This vast information sea has been spread though the [[Internet\|internet network]], which evolved into a magnificent tool of knowledge power on the latest years. Unfortunately, malicious intentioned people have been using this consistent tool for the spread of threats such as [[viruses]], [[Computer worms\|worms]], [[Trojan horses]] and others, again, to obtain confidential and powerful information such as bank accounts user names & passwords, confidential & military information or even CPU power to the increase of the spread of these threats. One powerful way of this spread, has been though Bots that integrate Botnets, which are the main focus on this research. This security breach has been one of the newest and most powerful threats relating to computer security within the last 5 years.		Each phase our world, has its healthiness’ such it has been with gold, commerce, industry and others on the last centuries. On this XXI century, the main wealth has been around information, and the spread of it. This information has been the key structure of our world's society, economy, health, development and others. This vast information sea has been spread though the [[Internet\|internet network]], which evolved into a magnificent tool of knowledge power on the latest years. Unfortunately, malicious intentioned people have been using this consistent tool for the spread of threats such as [[viruses]], [[Computer worms\|worms]], [[Trojan horses]] and others, again, to obtain confidential and powerful information such as bank accounts user names & passwords, confidential & military information or even CPU power to the increase of the spread of these threats. One powerful way of this spread, has been though Bots that integrate Botnets, which are the main focus on this research. This security breach has been one of the newest and most powerful threats relating to computer security within the last 5 years.

Rosard at 13:19, 12 April 2009

2009-04-12T13:19:57Z

← Older revision		Revision as of 13:19, 12 April 2009
Line 1:		Line 1:
-	Each phase our world, has its healthiness’ such it has been with gold, commerce, industry and others on the last centuries. On this XXI century, the main wealth has been around information, and the spread of it. This information has been the key structure of our world's society, economy, health, development and others. This vast information sea has been spread though the [[Internet\|internet network]], which evolved into a magnificent tool of knowledge power on the latest years. Unfortunately, malicious intentioned people have been using this consistent tool for the spread of threats such as [[viruses]], [[Computer worms\|worms]], [[Trojan horses]] and others, again, to obtain confidential and powerful information such as bank accounts user names & passwords, confidential & military information or even CPU power to the increase of the spread of these threats. One powerful way of this spread, has been though Bots that integrate Botnets, which are the main focus on this research. This security breach has been one of the newest and most powerful threats relating to computer security within the last 5 years.
	[[Image:20080923-spam-botnet.jpg]]		[[Image:20080923-spam-botnet.jpg]]
		+	<br>
		+	Each phase our world, has its healthiness’ such it has been with gold, commerce, industry and others on the last centuries. On this XXI century, the main wealth has been around information, and the spread of it. This information has been the key structure of our world's society, economy, health, development and others. This vast information sea has been spread though the [[Internet\|internet network]], which evolved into a magnificent tool of knowledge power on the latest years. Unfortunately, malicious intentioned people have been using this consistent tool for the spread of threats such as [[viruses]], [[Computer worms\|worms]], [[Trojan horses]] and others, again, to obtain confidential and powerful information such as bank accounts user names & passwords, confidential & military information or even CPU power to the increase of the spread of these threats. One powerful way of this spread, has been though Bots that integrate Botnets, which are the main focus on this research. This security breach has been one of the newest and most powerful threats relating to computer security within the last 5 years.
	<br>		<br>

	== Bot? What is it?? How it works???==		== Bot? What is it?? How it works???==
	[[Image:Talking-trojan.jpg]]		[[Image:Talking-trojan.jpg]]
		+	<br>
	A Bot is a type of malicious software that after successfully invading a machine (called [[Zombie computers]]), usually installed via worms, Trojan horses, or through [[Back doors]], under a common [[command-and-control]](C&C) infrastructure. These new installed malicious software (Most likely to exist in machines that run on [[Windows]] OS (most used OS in the world), which don't have a file-user safe executing system like computers that run on [[Linux]] or [[Mac]] OS) behave like “worm” processes, capable of spreading though the infected machine. The Bot camouflages itself, maintaining a low profile (using the least system resources for example before ordered to attack) and only then, they connect to a communication channel ([[IRC]], [[Web Server]] or [[Peer to Peer File Sharing\|P2P Server]]), allowing the attacker (Bot Herder) full control of this machine though a remote communication channel.		A Bot is a type of malicious software that after successfully invading a machine (called [[Zombie computers]]), usually installed via worms, Trojan horses, or through [[Back doors]], under a common [[command-and-control]](C&C) infrastructure. These new installed malicious software (Most likely to exist in machines that run on [[Windows]] OS (most used OS in the world), which don't have a file-user safe executing system like computers that run on [[Linux]] or [[Mac]] OS) behave like “worm” processes, capable of spreading though the infected machine. The Bot camouflages itself, maintaining a low profile (using the least system resources for example before ordered to attack) and only then, they connect to a communication channel ([[IRC]], [[Web Server]] or [[Peer to Peer File Sharing\|P2P Server]]), allowing the attacker (Bot Herder) full control of this machine though a remote communication channel.
	<br>		<br>