Document Type
Article
Journal/Book Title/Conference
IEEE GLOBECOM 2008 proceedings
Publication Date
1-1-2008
Abstract
Botnets have evolved to incorporate peer-to-peer communication for the purpose of better hiding the administrative source of the botnet. Current botnet detection mechanisms identify network traffic patterns at strategic locations within a network such as the gateway. As detection techniques improve, botnet design will continue to evolve to evade detection; thus, it is advantageous to identify potential future botnet models for the purpose of developing defense mechanisms before an actual new attack type is seen in the wild. This paper presents a model for coordinating external communication among bots located within the same switched network. This model prevents a gatewaybased monitor from correlating external communication dialogs as the internal source of the communication is not a single bothost. Future phases of this project include developing efficient techniques for mitigating this potential future botnet model.
Recommended Citation
Shirley, Brandon and Mano, Chad D., "Sub-Botnet Cordination Using Tokens in a Switched Network" (2008). Space Dynamics Laboratory Publications. Paper 116.
https://digitalcommons.usu.edu/sdl_pubs/116