Cent, five cent, ten cent, dollar: hitting botnets where it really hurts

  • Authors:
  • Richard Ford;Sarah Gordon

  • Affiliations:
  • Florida Institute of Technology, Melbourne, FL;Florida Institute of Technology, Melbourne, FL

  • Venue:
  • NSPW '06 Proceedings of the 2006 workshop on New security paradigms
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

Spyware, Adware, Bots. In each case, there is significant evidence that there is an increasing financial motivation behind the writing and distribution of these programs. In this paper, the concept of using our knowledge of these financial motivators to combat malicious software is introduced. Can attacks on business models actually provide relief that technology alone cannot? Can we deploy our technology differently, in order to receive direct benefits of this indirect attack on revenue streams? Our conclusion is that not only is this a possible solution, but that it may be an extremely effective one. This is illustrated by a description of our business model attack generator, MARK - the Multihost Adware Revenue Killer. Using MARK, we demonstrate simple but effective attacks against Malicious-code generated revenue streams. However, the creation and deployment of MARK raises thorny legal and ethical questions, as the impact of the technology is widespread and could easily be targeted at legitimate online marketing models. Do the ends justify the means?