Resilient Botnet Command and Control with Tor
Dennis Brown explores resilient botnet command and control with tor at DEF CON 18, examining privacy and practical defenses.
Summary
Architecture and Background
Dennis Brown - Resilient Botnet Command and Control with Tor There's nothing worse than toiling away at building a large, powerful botnet after months of effort, only to see it get taken down due to being taken down by an ISP, hosting provider or due to law enforcement intervention. Fortunately, a tool exists that will help us hide the command and control channels of botnets to allow us control our botnets anonymously.
Vulnerability Analysis
This tool is Tor. This presentation discusses several ways to operate a botnet anonymously via Tor, discuss the strengths and weaknesses of each method, and demonstrate some of these techniques live.
Exploitation and Demonstrations
Mitigation techniques will also be discussed for all the white hats in attendance. Dennis Brown is a research engineer for Tenable Network Security.
Remediation and Defensive Strategies
He specializes in malware analysis with a penchant for botnet research. Dennis has appeared previously at Toorcon and on the PaulDotCom security podcast, and is a frequent presenter for DC401 in Rhode Island. For copies of the slides and additional materials please see the DEF CON 18 Archive here:
Related talks
Main Stage·20 min
Martin Vigo
Martin Vigo presents compromising online accounts by cracking voicemail systems: Voicemail systems have been with us since the 80s.
Main Stage·19 min
Truman Kain
Truman Kain presents dragnet your social engineering sidekick: First, Dragnet collects dozens of OSINT data points on past and present social engineering targets.
Main Stage·39 min
Tottenkoph
Tottenkoph details want to take a stab at graffiti but spray paint fumes get you nauseous.