So You Want to Take Over a Botnet
So You Want to Take Over a Botnet
复制标题
DOI：
--
复制
发表时间：
2012-04
期刊：
影响因子：
--
通讯作者：
D. Dittrich
中科院分区：
文献类型：
--
作者：
D. Dittrich
计算机犯罪分子经常构建由地球仪周围的数千台受损计算机组成的大型分布式攻击网络。这些攻击网络一旦形成，就被用来实施计算机犯罪，造成其他一些次级计算机犯罪的受害者，例如拒绝服务攻击、发送垃圾邮件、窃取个人和财务信息以实施欺诈、泄露专有信息以获得竞争优势（工业间谍），创建和操作僵尸网络的犯罪分子与计算机安全行业和研究界之间的军备竞赛，这些僵尸网络的攻击性正在升级随着僵尸网络工程和操作的复杂程度的提高，对逆向工程的需求也在增加，了解可以在防御（或反击）方面利用的设计弱点，以及采取行动或根除僵尸网络可能导致意外后果的可能性。
Computer criminals regularly construct large distributed attack networks comprised of many thousands of compromised computers around the globe. Once constituted, these attack networks are used to perform computer crimes, creating yet other sets of victims of secondary computer crimes, such as denial of service attacks, spam delivery, theft of personal and financial information for performing fraud, exfiltration of proprietary information for competitive advantage (industrial espionage), etc. The arms race between criminal actors who create and operate botnets and the computer security industry and research community who are actively trying to take these botnets down is escalating in aggressiveness. As the sophistication level of botnet engineering and operations increases, so does the demand on reverse engineering, understanding weaknesses in design that can be exploited on the defensive (or counter-offensive) side, and the possibility that actions to take down or eradicate the botnet may cause unintended consequences.