殭屍網路測試自動化環境架設與實驗執行

Automating Botnet Testing Environment Construction and Experiment Performing

陳彥甫(Yan-Fu Chen)

指導教授 ： 田筱榮

中原大學/工學院/資訊工程研究所/碩士(2012年)

https://doi.org/10.6840/cycu201201014

摘要

由於電腦運算能力與網路技術的提升，各種不同的攻擊手法也跟著日新月異，許多的重大攻擊事件是藉著殭屍網路進行，因此需要研發出更多有效的防禦的安全機制與解決方法。然而建構測試這些防禦機制的可用性所需的一個與真實環境相仿的測試環境是一項困難的工作，本研究主要是對殭屍網路自動化架設環境及攻防演練，以著名殭屍病毒—宙斯(Zeus Botnet)為基礎，設計出自動化架構環境及可自由調整參數的自動執行腳本進行攻防演練的自動化程式，也可自行增加編寫其他腳本來增加不同的攻擊手法，來模擬更多不同的殭屍病毒的行為。

關鍵字

Zeusbot ； 個人資料 ； 殭屍網路

並列摘要

With each progress made in computers and networking technology, come all sorts of new threats to the security of the cyberworld. Many of the recent damaging security incidents are conducted through botnets, therefore effective defense mechanism is in great need. However, one of the difficulties faced by researchers in trying to attack this problem is the lacking of a tool which can automate the process to create a suitable experiment environment according to the scenio conceived by researchers for testing a proposed defense mechanism. In this paper, we discuss the design of such a tool. A prototype of the tool is implemented based on the Zeus Botnet. With the tool, researcher can easily construct an experiment environment to emulate the operation of botnet.

並列關鍵字

botnet ； Zeus ； personal data

參考文獻

[13] 何彥志，“P2P BOTS之行為模擬”，中原大學研究所，碩士論文，中華民國九十九年七月。

[7] BASET S. & SCHULZRINNE H., “AN ANALYSIS OF THE SKYPE PEER-TO-PEER INTERNET TELEPHONY PROTOCOL”, PROCEEDINGS OF THE INFOCOM '06 (BARCELONA, SPAIN, APR. 2006)

[9] ABUSE.CH, "ZEUS GETS MORE SOPHISTICATED USING P2P TECHNIQUES" OCTOBER 10, 2011

[1] ORMEROD T.,WANG L.,DEBBABI M.,YOUSSEF A.,HAMAD BINSALLEEH H.,BOUKHTOUTA A.,SINHA P.,"DEFAMING BOTNET TOOLKITS: A BOTTOM-UP APPROACH TO MITIGATING THE THREAT" EMERGING SECURITY INFORMATION SYSTEMS AND TECHNOLOGIES (SECURWARE), 2010 FOURTH INTERNATIONAL CONFERENCE ON, 18-25 JULY 2010, PP.195-200

[2] BARFORD,P.;YEGNESWARAN,V., “AN INSIDE LOOK AT BOTNETS”, PROCEEDINGS OF THE ARO-DHS SPECIAL WORKSHOP ON MALWARE DETECTION, ADVANCES IN INFORMATION SECURITY, SPRINGER, 2006