|
Title: Botnets Post by: Root_compromise on March 26, 2008, 12:14:33 AM Does anyone have any recommendations on books/sites that are doing botnet research. Technical details and the coding behind them (not just the news stories of x number of infections).
Thanks Title: Re: Botnets Post by: RoleReversal on March 26, 2008, 04:09:30 AM The Honeynet Project (http://www.honeynet.org/), SANs Reading Room (http://www.sans.org/reading_room/) and Cyber-TA (http://www.cyber-ta.org/) are good places to start in this field.
I've mentioned this in another thread (http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,1910.msg7621/#msg7621) but Steve Gibsons analysis of DDoS attacks using botnets make an interesting (but slightly dated read). Can be difficult to find though :'( Happy Hunting Title: Re: Botnets Post by: pseud0 on March 26, 2008, 12:42:18 PM Just an addition to RR's post:
http://www.honeynet.org/papers/bots/ Title: Re: Botnets Post by: don on March 26, 2008, 09:45:07 PM Lance's HoneyNet Project is without a doubt the place to start. But also look at:
Virtual Honeypots: From Botnet Tracking to Intrusion Detection (http://www.amazon.com/gp/redirect.html?ie=UTF8&location=http%3A%2F%2Fwww.amazon.com%2FVirtual-Honeypots-Tracking-Intrusion-Detection%2Fdp%2F0321336321&tag=thedigitalcon-20&linkCode=ur2&camp=1789&creative=9325) And more info can be found here with an endorsement by Lance himself: http://www.honeyd.org/ Hope this helps, Don Title: Re: Botnets Post by: RoleReversal on March 27, 2008, 03:35:38 AM Virtual Honeypots: From Botnet Tracking to Intrusion Detection (http://www.amazon.com/gp/redirect.html?ie=UTF8&location=http%3A%2F%2Fwww.amazon.com%2FVirtual-Honeypots-Tracking-Intrusion-Detection%2Fdp%2F0321336321&tag=thedigitalcon-20&linkCode=ur2&camp=1789&creative=9325) Don, I've taken a look at this book on Amazon a few times but haven't been able to find a copy in store to take a quick shuffty at. I assume from your post it's worth the outlay? While I can find a tenuous link; is there anyway for me to connection the H affliation-type stuff with the UK (or other) Amazon sites? Currency conversion is starting to make my head hurt ;) Title: Re: Botnets Post by: RoleReversal on March 27, 2008, 09:05:21 AM Coming off the back of this thread I've found both a review and sample chapter on LSO (don't know why I didn't think to check here earlier) by Chris Gates, thanks man. Review can be found here: http://www.learnsecurityonline.com/index.php?option=com_content&task=view&id=224&Itemid=85)
Sample chapter can be found here for your studying pleasure http://www.informit.com/content/images/9780321336323/samplechapter/0321336321_CH11.pdf Title: Re: Botnets Post by: don on March 29, 2008, 08:53:37 PM Or you could look here:
http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,1816.0/ RoleReversal - Short answer...yes. Get the book. Use our Amazon search box on the right side of the page. Every little bit helps. ;) Thanks, Don Title: Re: Botnets Post by: RoleReversal on March 30, 2008, 03:50:05 AM Or you could look here: http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,1816.0/ Oops, don't know how I managed to miss that one :-[
Powered by SMF 1.1.4 |
SMF © 2006-2007, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com |