Comparative analysis and evaluation of botnet command and control models

Abstract

Global Internet threats have undergone a profound transformation from attacks designed solely to disable infrastructure to those that also target people and organizations. At the center of many of these attacks are collections of compromised computers, or Botnets, remotely controlled by the attackers, and whose members are located in homes, schools, businesses, and governments around the world. This paper provides a brief look at how existing botnet research, the evolution and future of botnets, as well as a comparative analysis of the various bot communication methods and investigate their associated benefits and weaknesses. We propose a contemporary Multi Server Cnc topology in which only bots with static global IP addresses are eligible as candidates for being in the peer list. This design ensures that the peer list in each bot has long life time making it geographically optimized © 2010 IEEE.