Volume -I , Issue -VII, October 2014

COMMAND AND CONTROL CHANNEL USING DNS

Andrea Noreen Dsilva , Nagalakshmi S. Shagouftataskeen

A botnet is a group of compromised computers, which are remotely controlled by hackers to launch various network attacks, such as DDoS attack and information phishing.Botnet is a hybrid of previous threats integratedwith a command and control system and hundreds of millions of computers are infected. Attackers, in particular botnet controllers, use stealthy messaging systems to set up large-scale command and control. To systematically understand the potential capability of attackers, we investigate the feasibility of using domain name service (DNS) as a stealthy botnet command-and-control channel. We describe and quantitatively analyze several techniques that can be used to effectively hide malicious DNS activities at the network level.

Command , Control Channel , Domain Name System (DNS).

1. 4.Paul Watters Internet Commerce Security Laboratory University of Ballarat, A Survey on Latest Botnet Attack and Defense,2011 International Joint Conference of IEEE TrustCom-11/IEEE ICESS-11/FCST-11
2. 2.P. Butler, K. Xu, and D. Yao, “Quantitatively Analyzing Stealthy Communication Channels,” Proc. Ninth Int’l Conf. Applied Cryptography and Network Security (ACNS ’11), pp. 238-254, 2011.
3. 1.Kui Xu, Member, IEEE, Patrick Butler, SudipSaha, and Danfeng (Daphne) Yao, Member, IEEE, DNS for Massive-Scale Command and Control,IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING, VOL. 10, NO. 3, MAY/JUNE 2013.
4. 3.D. Dagon, “Botnet Detection and Response, the Network Is the Infection,” Proc. Domain Name System Operations Analysis and Research Center Workshop, 2005.
5. 5.Chao Li National Computer network Emergency Response technical,Botnet: Survey and Case Study,2009 Fourth International Conference on Innovative Computing, Information and Control.