Protecting web 2.0 services from botnet exploitations | Macquarie University ResearchOnline

Home

Please use this identifier to cite or link to this item: http://hdl.handle.net/1959.14/118699

45 Visitors

64 Hits

11 Downloads

File	Description	Size	Format
DS01	Publisher version (open access)	628 KB	Adobe Acrobat PDF	View/Open

Title: Protecting web 2.0 services from botnet exploitations
Related: Cybercrime and Trustworthy Computing Workshop (2nd : 2010) (19 - 20 August 2010 : Ballarat, Australia)
Related: Second Cybercrime and Trustworthy Computing Workshop : Ballarat, Victoria, Australia, 19-20 July 2010, p.18-28
DOI: 10.1109/CTC.2010.10
Publisher: Los Alamitos, Calif : IEEE
Date: 2010
Author/Creator: Vo, Nguyen H
Author/Creator: Pieprzyk, Josef
Description: Recently, botnet, a network of compromised computers, has been recognized as the biggest threat to the Internet. The bots in a botnet communicate with the botnet owner via a communication channel called Command and Control (C & C) channel. There are three main C & C channels: Internet Relay Chat (IRC), Peer-to-Peer (P2P) and web-based protocols. By exploiting the flexibility of the Web 2.0 technology, the web-based botnet has reached a new level of sophistication. In August 2009, such botnet was found on Twitter, one of the most popular Web 2.0 services. In this paper, we will describe a new type of botnet that uses Web 2.0 service as a C & C channel and a temporary storage for their stolen information. We will then propose a novel approach to thwart this type of attack. Our method applies a unique identifier of the computer, an encryption algorithm with session keys and a CAPTCHA verification.
Description: 11 page(s)
Resource Type: conference paper
Organisation: Macquarie University. Dept. of Computing

Identifier: http://hdl.handle.net/1959.14/118699
Identifier: ISBN:9780769541860
Identifier: mq-rm-2010004055
Language: eng
Rights: Copyright 2010 IEEE. Reprinted from Second Cybercrime and Trustworthy Computing Workshop : Ballarat, Victoria, Australia, 19-20 July 2010. This material is posted here with permission of the IEEE. Such permission of the IEEE does not in any way imply IEEE endorsement of any of Macquarie University’s products or services. Internal or personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution must be obtained from the IEEE by writing to pubs-permissions@ieee.org. By choosing to view this document, you agree to all provisions of the copyright laws protecting it.
Full Text
Reviewed

Macquarie University ResearchOnline