.

Botnet lab exercises for graduate-level security class?

<<

tjmarkowitz

Newbie
Newbie

Posts: 3

Joined: Mon Sep 27, 2010 4:16 pm

Post Tue Sep 28, 2010 8:44 am

Botnet lab exercises for graduate-level security class?

Folks,

I'm teaching an Introduction to Computer Security class and would love
to find what others have done in creating lab exercises for building and
managing a simple botnet in order to make it more "real" for my
students. Any pointers to references would be much appreciated.

Thanks in advance.

//ted
--------------------------------------------------------------------------
T E D  M A R K O W I T Z
Dept. of Electrical & Computer Engineering and Computer Science (ECECS)
252 Buckman Hall
Tagliatela School of Engineering
University of New Haven
West Haven, CT 06516

WWW: http://www.unh-ececs.net
e-mail: tmarkowitz@newhaven.edu
office/fax: 1-203-655-2400
mobile: 1-203-984-6565
--------------------------------------------------------------------------
<<

former33t

Full Member
Full Member

Posts: 226

Joined: Sat Feb 14, 2009 12:33 am

Post Tue Sep 28, 2010 9:08 pm

Re: Botnet lab exercises for graduate-level security class?

First, I don't have any example code to throw your way, but I'd tread lightly on this.  I think there are some legal implications in giving your students bot software.

If you were keeping the whole thing in a lab, you might write some simple bot code that sends packets on command (simulated DDOS) in your university lab and provide students access to the controller to see how it works.  That way even if it gets out (and it will), your liability is pretty nill.
Certifications: CREA, MCSE: Security, CCNA, Security+, other junk
<<

tjmarkowitz

Newbie
Newbie

Posts: 3

Joined: Mon Sep 27, 2010 4:16 pm

Post Wed Sep 29, 2010 9:06 am

Re: Botnet lab exercises for graduate-level security class?

Excellent points and I warn my students about such things all semester. On the other hand, I don't think there's a better way to learn to protect yourself than knowing exactly how attackers go about hurting you.

Actually I was planning on doing precisely as you suggest: off-line, well-insulated, using throw-away VM's as targets, etc. I'm just looking for some example code to use as a headstart vs. beginning completely from scratch.

Cheers,

//ted
<<

Xen

User avatar

Sr. Member
Sr. Member

Posts: 386

Joined: Tue Feb 03, 2009 3:59 am

Post Wed Sep 29, 2010 9:46 am

Re: Botnet lab exercises for graduate-level security class?

You might want to check some links I posted few months back http://www.ethicalhacker.net/component/ ... ic,5541.0/
<<

wmburke

User avatar

Newbie
Newbie

Posts: 17

Joined: Wed Sep 15, 2010 5:20 am

Post Thu Sep 30, 2010 8:23 am

Re: Botnet lab exercises for graduate-level security class?

Hi Ted, Just to reinforce what was mentioned before but with the strongest point that you should MAKE students very aware of: 5 years + $250,000.

I suggest using a packet builder that will allow you to use a test script that will have them understand what takes place.

Example free builder: Engage Packet builder - Scriptable libnet-based packet builder

Student Charged with Using University Computer Network for Denial of Service Attacks and to Control Other Computers (via “BotNet” zombies)
Steven

http://www.cybercrime.gov/frostPlea.pdf

http://www.cybercrime.gov/smithPlea2.pdf

http://www.cybercrime.gov/anchetaSent.htm

http://www.cybercrime.gov/maxwellPlea.htm

Hope this helps as I teach many of the CEH classes
"If the only tool you have is a hammer, you tend to see every problem as a nail"
Abraham Maslow
<<

wmburke

User avatar

Newbie
Newbie

Posts: 17

Joined: Wed Sep 15, 2010 5:20 am

Post Thu Sep 30, 2010 8:47 am

Re: Botnet lab exercises for graduate-level security class?

FYI you can follow our tweets on:

www.sequrit.org

Another high level botnet case:

VANCOUVER--The take down of the Mariposa botnet is a cyber law enforcement success story - but gaps in international cyber law could make it difficult to prosecute those behind the botnet.

http://threatpost.com/en_us/blogs/gaps- ... st+Popular

A researcher involved in the analysis and dismantling of the Mariposa botnet said that gaps in cyber crime laws in the countries from which the botnet was operated may make it difficult to prosecute those accused of operating the scheme.
"If the only tool you have is a hammer, you tend to see every problem as a nail"
Abraham Maslow
<<

wmburke

User avatar

Newbie
Newbie

Posts: 17

Joined: Wed Sep 15, 2010 5:20 am

Post Thu Sep 30, 2010 8:52 am

Re: Botnet lab exercises for graduate-level security class?

Here is a great video link posted in one of the other posts:

Botnets using twitter

http://www.youtube.com/watch?v=r_F3VheC9ww

And Don posted this as well:

http://www.scmagazineus.com/tool-lets-t ... le/170236/

Gee thanks Ted now I am going to be spending the day on Bot Nets  :'(
"If the only tool you have is a hammer, you tend to see every problem as a nail"
Abraham Maslow

Return to Malware

Who is online

Users browsing this forum: No registered users and 1 guest

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software