~/talk

I Trust My Zombies: A Trust-Enabled Botnet

Talkat Black Hat Europe 2017 · 2017-12-04..12-07· [security, networking]
links:none on file
links:none on file
links:none on file
links:none on file
slides:none on file

Describes a botnet design that integrates trust mechanisms among compromised hosts to resist detection and takedown efforts. Discusses how trust-enabled coordination changes attacker and defender dynamics and the implications for current botnet mitigation techniques such as monitoring and infiltration.

AI-written summary · about

  1. 0:00Intro
  2. 0:26Introduction #1
  3. 3:02Terminology #1
  4. 3:31Terminology #28
  5. 5:44How can P2P botnets be taken down?
  6. 6:52Background: crawlers & sensors
  7. 7:59Background: Computational Trust
  8. 10:07Background: the Sality P2P Botnet
  9. 11:23Background: Sality "Hello" messages
  10. 14:39Meet our Botnet
  11. 18:19Experiments: objectives of monitoring
  12. 19:22Experiments: setup
  13. 20:11Experiments: Results - single-sensor
  14. 21:11Experiments: Results - multi-sensor (10)
  15. 21:35Experiments: Results - colluding sensors
  16. 24:22Conclusion
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.