Bots & Botnets

From Computing and Software Wiki

Revision as of 21:41, 13 April 2008 (view source) 99.229.90.78 (Talk) (→How to Fight Botnets) ← Older edit		Revision as of 00:52, 14 April 2008 (view source) 99.229.90.78 (Talk) Newer edit →
Line 3:		Line 3:
	== Definitions ==		== Definitions ==
	*Bot		*Bot
		+	A Bot is short for robot. In the context of this wikipedia page a bot is a compromised computer by malicious software that
	*Herder		*Herder
		+	A person who controls all the bots in the botnet.
	*Scrumping		*Scrumping
		+	A bot stealing CPU cycles from the host computer.
	===Bot===		===Bot===
	===Herder===		===Herder===

---

Revision as of 00:52, 14 April 2008

insert description here

Contents 1 Definitions 1.1 Bot 1.2 Herder 1.3 Zombie 1.4 Scrumping 2 Attacks 2.1 DDoS 2.2 Spamming 2.3 Phishing 3 Life Cycle 4 Bot Management 5 How to Fight Botnets 5.1 Norton Anti-Bot 6 References 7 See Also 8 External Links

Definitions

• Bot

A Bot is short for robot. In the context of this wikipedia page a bot is a compromised computer by malicious software that

• Herder

A person who controls all the bots in the botnet.

• Scrumping

A bot stealing CPU cycles from the host computer.

Bot

Herder

Zombie

Scrumping

Attacks

• DDoS
• Spamming
• Phishing

DDoS

Spamming

Phishing

Life Cycle

• Intial setup of configuration settings of the bot
• Register a Dynamic DNS
• Infect a PC with a bot
  • Bot propagates according to the configuration settings
  • Scans for vunerabilities
  • Idle
  • Performs actions as recieved by other bots above it in the chain of command
  • Bot dies:
    • Bot may be taken over by another botnet
    • The bot's owner's pc realizes the pc is a zombie, kills the bot.
    • The chain of command may be compromised above the level.

Bot Management

They commonly have hidden removal commands, to completely clean the host computer. On the larger IRC networks such as EFnet channel activity is logged in order to learn the commands, and then automated systems are setup to prevent the owner of the botnet from accessing them and at the same time perform the removal command when a bot comes online to it's control channel.

How to Fight Botnets

Norton Anti-Bot

References

"Botnet"

See Also

"Alternative Technologies for Ethernet"

External Links

http://www.symantec.com/norton/products/overview.jsp?pcid=is&pvid=nab1