Towards Next-Generation Botnets

In this paper, we introduce the design of an advanced bot called Rambot that is based on the weaknesses we found when tracking a diverse set of botnets over a period of several months. The main features of this bot are peer-to-peer communication, strong cryptography, a credit-point system to build bilateral trust amongst bots, and a proof-of-work scheme to protect against potential attacks. The goal of this work is to increase the understanding of more advanced botnet designs, such that more effcient detection and mitigation systems can be developed in the future. 在本文中我们介绍了一种名叫Rambot的先进的僵尸程序，这个程序是我们在几个月时间里跟踪各种僵尸网络，并分析它们的各种弱点之后设计的。这个僵尸程序的最主要的特点是基于P2P协议通信控制、使用健壮的加密算法、僵尸间使用信任点系统、使用工作校对来保护潜在攻击。本文的目的是增加对更先进僵尸程序设计的理解，以此希望在将来能够设计出更有效的检测和防范系统。