Skip to main content
Top

2018 | OriginalPaper | Chapter

3. The Anatomy of P2P Botnets

Author : Shankar Karuppayah

Published in: Advanced Monitoring in P2P Botnets

Publisher: Springer Singapore

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

This chapter provides an in-depth analysis on the anatomy of three P2P botnets that are focused in this book; GameOver Zeus, Sality and ZeroAccess. This analysis is partly done based on own reverse-engineering work as well as based on the work of other collaborators that have thoroughly studied botnets such as GameOver Zeus. Besides explaining the inner-workings of each botnet’s membership management mechanism, this chapter also describes the anti-monitoring mechanisms that are employed by the botnets to impede botnet monitoring attempts. The information provided in this chapter not only useful for the remaining part of this book, but is also able to provide a glimpse of the advancements of existing botnets to the readers.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Footnotes
1
md5 = ea039a854d20d7734c5add48f1a51c34
 
Literature
1.
go back to reference Andriesse, D., Rossow, C., Stone-Gross, B., Plohmann, D., Bos, H.: Highly resilient Peer-to-Peer botnets are here: an analysis of Gameover Zeus. In: International Conference on Malicious and Unwanted Software: The Americas (2013) Andriesse, D., Rossow, C., Stone-Gross, B., Plohmann, D., Bos, H.: Highly resilient Peer-to-Peer botnets are here: an analysis of Gameover Zeus. In: International Conference on Malicious and Unwanted Software: The Americas (2013)
2.
go back to reference Abuse.ch: Zeus Gets More Sophisticated Using P2P Techniques (2011) Abuse.ch: Zeus Gets More Sophisticated Using P2P Techniques (2011)
3.
go back to reference Polska, C.E.R.T.: Zeus-P2P monitoring and analysis. Technical report, CERT Polska (2013) Polska, C.E.R.T.: Zeus-P2P monitoring and analysis. Technical report, CERT Polska (2013)
4.
go back to reference Rossow, C., Andriesse, D., Werner, T., Stone-gross, B., Plohmann, D., Dietrich, C.J., Bos, H., Secureworks, D.: P2PWNED: modeling and evaluating the resilience of Peer-to-Peer botnets. In: IEEE Symposium on Security and Privacy (2013) Rossow, C., Andriesse, D., Werner, T., Stone-gross, B., Plohmann, D., Dietrich, C.J., Bos, H., Secureworks, D.: P2PWNED: modeling and evaluating the resilience of Peer-to-Peer botnets. In: IEEE Symposium on Security and Privacy (2013)
5.
go back to reference Karuppayah, S., Roos, S., Rossow, C., Mühlhäuser, M., Fischer, M.: ZeusMilker: circumventing the P2P Zeus neighbor list restriction mechanism. In: IEEE International Conference on Distributed Computing Systems (ICDCS) (2015) Karuppayah, S., Roos, S., Rossow, C., Mühlhäuser, M., Fischer, M.: ZeusMilker: circumventing the P2P Zeus neighbor list restriction mechanism. In: IEEE International Conference on Distributed Computing Systems (ICDCS) (2015)
6.
go back to reference Falliere, N.: Sality: Story of a Peer-to-Peer Viral Network. Technical report, Symantec (2011) Falliere, N.: Sality: Story of a Peer-to-Peer Viral Network. Technical report, Symantec (2011)
7.
8.
go back to reference Neville, A., Gibb, R.: ZeroAccess Indepth. Symantec Security Response (2013) Neville, A., Gibb, R.: ZeroAccess Indepth. Symantec Security Response (2013)
9.
go back to reference Symantec: Grappling with the ZeroAccess Botnet (2013) Symantec: Grappling with the ZeroAccess Botnet (2013)
10.
go back to reference Wyke, J.: The ZeroAccess BotnetMining and Fraud for Massive Financial Gain.Sophos Technical Paper (2012) Wyke, J.: The ZeroAccess BotnetMining and Fraud for Massive Financial Gain.Sophos Technical Paper (2012)
Metadata
Title
The Anatomy of P2P Botnets
Author
Shankar Karuppayah
Copyright Year
2018
Publisher
Springer Singapore
DOI
https://doi.org/10.1007/978-981-10-9050-9_3

Premium Partner