The BotBrigade Proposal, Botnet Versus Botnet

The BotBrigade Proposal, Botnet Versus Botnet
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Computer Software Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
The BotBrigade Proposal, Botnet Versus Botnet Gregory 11-10-2007
Posted by Gregory on November 10, 2007, 11:16 am
If you were  Registered and logged in, you could reply and use other advanced thread options
This is a proposal presenting a solution to mitigate the massive
criminal controlled botnet infrastructure. A "white hat" botnet
programmed to DDOS the individual zombie computers of a criminal botnet.

Several alternate techniques may provide the means to acheive this end.
Attaching to a project such as HoneyNet provides an existing
infrastructure to get the project rolling in short order. A competing
solution would be to create a new project called BotBrigade which mimics
existing botnet behaviour. The BotBrigade would be a decentralized
infrstructure, and this method presents the best resilience thus using
the criminal's tools against the criminal! These computers would share
the IP addresses culled from victimized hosts, The BotBrigade would
cross-reference the IP address of a BotBrigade DDOS target (a criminal
controlled zombie) from at least three different source BotBrigade Traps
(a computer reporting the IP source address of spam).

50 BotBrigade zombie computers could cripple the Internet connection of
one criminal controlled zombie. Let the owner of the criminal controlled
zombie call their ISP to inquire about the Internet connectivity
failure. Let that owner clean their computer with appropriate software.
The DDOS would be sustained for a specific interval, perhaps 24 hours or
until failure to respond to ICMP requests, to avoid causing problems
with DHCP leases to uninfected hosts.

The computer security providers and ISPs demonstrate their inability to
protect. The initiatives they utilize provide a statistically
meaningless impact on criminal botnet activity.

The reasonable people of Internet community can stop the botnet plague!
Stop the time wasting spam!

Posted by Jim Watt on November 11, 2007, 3:40 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Sat, 10 Nov 2007 08:16:54 -0800, Gregory

>This is a proposal presenting a solution to mitigate the massive
>criminal controlled botnet infrastructure.

By creating another waste of resources

Why not concentrate on fixing the problem by improving
security and keeping the noise down.


--
Jim Watt
http://www.gibnet.com

Posted by Gregory on November 11, 2007, 7:18 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Jim Watt wrote:
> By creating another waste of resources

I propose leveraging underutilized resources. If the resources remain
underutilized, then the resources waste.

In practice, reactive security measures fail for consumer class devices.
In the enterprise, reactive security gain some protection, but will do
nothing in the coming botnet attacks. Limited time for a proactive
approach exists to mitigate a cascading Internet interupption for
everyone due to botnet activity.

I cite two recent articles. The first outlines a less than efficient
security scheme presented by a vendor. The failure will be inaction of
'home' users who tend to ignore moderate reductions in computer
responsiveness; furthermore, the cooperative nature of the initiative
will be it's downfall. The second presents the dominant ground held by
the criminal botnet controllers.

Computer scientist fights threat of ‘botnets’
Oct. 31, 2007
by Brian Mattmiller
http://www.news.wisc.edu/14380

The World's Biggest Botnets
NOVEMBER 9, 2007 | 1:08 PM
By Kelly Jackson Higgins
Senior Editor, Dark Reading
http://www.darkreading.com/document.asp?doc_id=138610&WT.svl=news1_1

Similar ThreadsPosted
botnet battle lost? October 17, 2006, 12:14 pm
Hackers plot to create massive botnet June 6, 2005, 3:03 pm
A Proposal for a Copy Optimized DVD Audio Format September 7, 2005, 1:17 am
password versus pin in application authentication May 29, 2006, 8:38 pm
Drivecrypt pre-boot auth versus multiple users October 11, 2005, 3:12 pm
Norton Antivirus 8.1 Corporate versus newer versions like Norton 2005? July 25, 2005, 5:28 am

The site map in XML format XML site map

Contact Us | Privacy Policy