~/talk

Understanding the Mirai Botnet

on YouTube 29m
Talkat 26th USENIX Security Symposium (USENIX Security '17) · 2017-08-16..08-18· [security, iot]

speakers

name:Manos Antonakakis
links:none on file
name:Tim April
links:none on file
name:Michael Bailey
links:none on file
name:Matt Bernhard
mastodon:@mbernhard@infosec.exchange
name:Elie Bursztein
github:ebursztein
name:Jaime Cochran
links:none on file
name:Zakir Durumeric
website:https://www.zakird.com
name:J. Alex Halderman
links:none on file
name:Luca Invernizzi
links:none on file
name:Michalis Kallitsis
links:none on file
name:Deepak Kumar
links:none on file
name:Chaz Lever
website:http://www.chazlever.com
name:Zane Ma
links:none on file
name:Joshua Mason
links:none on file
name:Damian Menscher
links:none on file
name:Chad Seaman
links:none on file
name:Nick Sullivan
links:none on file
name:Kurt Thomas
links:none on file
name:Yi Zhou
links:none on file

resources

video:https://youtu.be/1pywzRTJDaY
slides:none on file

summary

Seven-month measurement combines a network telescope, active scans, telnet honeypots and VirusTotal binaries with passive DNS and C2 monitoring to show Mirai reaches a peak ~600k infections but stabilizes at 200–300k steady-state, spreads via default telnet creds then a short-lived CWMP exploit, exposes 333 C2 clusters and 48 password dictionaries, predominantly targets cameras/DVRs, launches a 623 Gbps attack on Krebs using TCP-state and app-level vectors rather than amplifiers.

AI-written summary · about

chapters (8)

  1. 0:00Introduction to Mirai
  2. 1:47Botnet lifecycle
  3. 2:49Methodology and data sources
  4. 4:17Prevalence and composition
  5. 10:08Infrastructure and operators
  6. 13:39DDoS tactics and targets
  7. 18:03Lessons for IOT security
  8. 21:27Q&A session

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.