Detection of networks blocks used by the Storm Worm botnet

Authors:
Chun Wei;Alan Sprague;Gary Warner
Affiliations:
Univ. of Alabama at Birmingham, Birmingham, AL;Univ. of Alabama at Birmingham, Birmingham, AL;Univ. of Alabama at Birmingham, Birmingham, AL
Venue:
Proceedings of the 46th Annual Southeast Regional Conference on XX
Year:
2008

Citing 3
Cited 0

The Evolutionary Microcosm of Stock Spam

IEEE Security and Privacy
Using uncleanliness to predict future botnet addresses

Proceedings of the 7th ACM SIGCOMM conference on Internet measurement
Peer-to-peer botnets: overview and case study

HotBots'07 Proceedings of the first conference on First Workshop on Hot Topics in Understanding Botnets

Quantified Score

Hi-index	0.00

Visualization

Abstract

Storm Worm is a prolific web-spread Trojan virus that infects computers and turns them into nodes (called bots) of a botnet. The bots then can be used to distribute spam messages, launch DOS attacks, host phishing web sites, etc. This paper investigated Storm Worm bots that were used to propagate the virus during a four-month period of time. We found certain network blocks, because of their vulnerability, were more likely to contain Storm Worm bots.