viernes, 8 de mayo de 2009

Buen paper: "Analysis of a Botnet Takeover"

Interesante paper sobre el análisis de una botnet que fue secuestrada por los buenos:
http://www.cs.ucsb.edu/~seclab/projects/torpig/torpig.pdf


"In this paper, we report on our efforts to take control of the Torpig botnet for ten days. Over this period, we observed more than 180 thousand infections and recorded more than 70 GB of data that the bots collected. While botnets have been "hijacked" before, the Torpig botnet exhibits certain properties that make the analysis of the data particularly  interesting."