SLINGbot: A System for Live Investigation of Next Generation Botnets

There is an urgent need for a pro-active approach to botnet detection and mitigation that will enable computer network defenders to characterize emerging and future botnet threats and design effective defense techniques before these threats materialize. To this end, we have developed a system for li...

Full description

Saved in:
Bibliographic Details
Main Authors: Jackson, A.W., Lapsley, D., Jones, C., Zatko, M., Golubitsky, C., Strayer, W.T.
Format: Conference Proceeding
Language:English
Subjects:
Chaos
Character generation
Command and control systems
Computational modeling
Computer networks
Computer security
Distributed computing
Next Generation Botnets
Next generation networking
SLINGbot
Terrorism
Traffic control
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:There is an urgent need for a pro-active approach to botnet detection and mitigation that will enable computer network defenders to characterize emerging and future botnet threats and design effective defense techniques before these threats materialize. To this end, we have developed a system for live investigation of next generation bots (SLINGbot). SLINGbot is an extensible, composable bot framework that enables researchers to construct benign bots for the purposes of generating and characterizing botnet command and control (C2) traffic. This enables researchers to simulate current and potential future botnet traffic, characterize it, and design effective defense techniques. In this paper, we describe the SLINGbot system and how it can be used for the pro-active development of botnet defenses.
DOI:10.1109/CATCH.2009.26