Exploring A Root-Cause Methodology to Prevent Emerging Internet Threat

A “botnet” consists of a network of compromised computers controlled by an attacker often called botmaster. Recently, botnets have become the root cause of many Internet attacks. To be well-prepared for future attacks, it is not only study how to detect and defend against the botnets that have appeared in the past. More importantly, we should study advanced botnet designs that could be developed by botmasters in the near future. In this project, I construct an advanced hybrid peer to peer botnet. Attacks such as spamming, File replication attack distributed denial of service and phishing have become common place on the Internet. As attackers develop new methods to attack from distributed locations as well as avoid being detected, there is a need to develop efficient methods to detect and mitigate this epidemic of infection of hosts on the network. My aim is to analyze file replication attack in a peer to peer network. Honeypot techniques have been used to disassemble the binary and to identify the techniques that the botnet binary uses to spread it and to make its detection difficult by current scanners. And a framework have been designed for malware analysis, detection and shut down botnets.