To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- On 03.04.2006 04:25 wrote Mary Henthorn: > ---------- > I'm a senior technology analyst and a graduate computer science student. I'm > particularly interested in finding ways to discover botnets that are using > anything other than IRC as a C&C protocol by observing the enterprise > network, rather than setting up honeypots. Any clues you could give me would > be appreciated. >
not really sure if it gives you EXACTLY what you're looking for, but heres three links that could at least get you on your way; www.shadowserver.org/whitepapers/Botnets.pdf www.cert.org/archive/pdf/Botnets.pdf http://www.honeynet.org/papers/bots/ -- Daniel Elessedil Kjeserud 5057 Bergen, Norway [EMAIL PROTECTED] _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
