Bot or
web robots
Software applications that run automated tasks over the
Internet. The largest use of bots is in web spidering, in which an automated script
fetches, analyzes, and files information from web servers at many times the
speed of a human. Recently, bots have been used for search advertising, such as
Google AdSense.
Botnet
Collection of infected computers or bots that have been
taken over by hackers and are used to perform malicious tasks or functions. A computer
becomes a bot when it downloads a file (e.g., an e-mail attachment or malware
on a web site) that has bot software embedded in it. A botnet is considered a
botnet if it is taking action on the client itself via IRC channels without the
hackers having to log in to the client's computer. The typical botnet consists
of a bot server (usually an IRC server) and one or more bot clients.
How a
Bot Works
· Botnets have different topologies or
command and control (CnC) structures
· Most, it appears, use a compromised
server as an IRC server, or referred to as the IRC daemon (IRCd)
· Multiple bots will communicate with
the IRCd via a “phone home” function
· Single point of failure: If the
central CnC is blocked or otherwise disabled, the botnet is effectively
neutered (this will become important as we get into the theory)

Comments
Post a Comment
Please write your comment