邪恶八进制信息安全团队技术讨论组's Archiver

eviloctal 2007-4-23 14:26

[转载]Rishi: Identify Bot Contaminated Hosts by IRC Nickname Evaluation

信息来源:邪恶八进制信息安全团队([url]www.eviloctal.com[/url])

In this paper, we describe a simple, yet effective method to detect bot-infected machines within a given network that relies on detection of the communication channel between bot and Command & Control server (C&C server).

页: [1]
© 1999-2008 EvilOctal Security Team