Invasion of the Botnet Snatchers: A Case Study in Applied Malware Cyberdeception

Simple item page
dc.contributor.authorChandler, Jared
dc.contributor.authorFisher, Kathleen
dc.contributor.authorChapman, Erin
dc.contributor.authorDavis, Eric
dc.contributor.authorWick, Adam
dc.date.accessioned2020-01-04T07:31:59Z
dc.date.available2020-01-04T07:31:59Z
dc.date.issued2020-01-07
dc.description.abstractIn this paper, we provide the initial steps towards a botnet deception mechanism, which we call 2face. 2face provides deception capabilities in both directions – upward, to the command and control (CnC) server, and downward, towards the botnet nodes – to provide administrators with the tools they need to discover and eradicate an infestation within their network without alerting the botnet owner that they have been discovered. The key to 2face is a set of mechanisms for rapidly reverse engineering the protocols used within a botnet. The resulting protocol descriptions can then be used with the 2face network deception tool to generate high-quality deceptive messaging, against the attacker. As context for our work, we show how 2face can be used to help reverse engineer and then generate deceptive traffic for the Mirai protocol. We also discuss how this work could be extended to address future threats.
dc.format.extent10 pages
dc.identifier.doi10.24251/HICSS.2020.229
dc.identifier.isbn978-0-9981331-3-3
dc.identifier.urihttp://hdl.handle.net/10125/63968
dc.language.isoeng
dc.relation.ispartofProceedings of the 53rd Hawaii International Conference on System Sciences
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subjectCyber Deception for Defense
dc.subjectbotnets
dc.subjectcybersecurity
dc.subjectdeception
dc.subjecthuman-machine teaming
dc.titleInvasion of the Botnet Snatchers: A Case Study in Applied Malware Cyberdeception
dc.typeConference Paper
dc.type.dcmiText

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
0184.pdf
Size:
409.96 KB
Format:
Adobe Portable Document Format
Download

Collections

Cyber Deception for Defense