He was botnet or but networks.
Now, what is a botnet, a botnet repairs to a group of computers which have been infected by malware
and have come under the control of malicious of the term botnet is came from the word robot and network,
and each infected device is called out.
But it's can be designed to accomplish illegal or malicious tasks, including sending spam, stealing
data, ransomware, fraudulently clicking on ads or distributed denial of service attacks.
How is a botnet control now?
A core characteristic of botnet is the ability to receive updated instruction from the bot here.
The.
The ability to communicate with each one in network or in the network allows the attacker to alternate
attack vectors, change the targeted IP address, terminate an attack and other customized actions,
botnet designs, very.
But the control structures can be broken down into two general categories.
The first one, which is the client server botnet model.
Now the client server model mimics the traditional remote workstation workflow where each individual
machine connects to a centralized server or small number of centralized servers in order to access information.
And in this model, each book will connect to a command and control center, which is C called CMC Resource,
like a Web doing or an I.R.S. Chenin in order to receive instruction.
Now, I won't do man or an agency in order to receive instruction by using these centralized repositories
to serve up a new commands for the botnet and attacker simply needs to modify the source material that
each botnet consumes from a command center in order to update instruction to the infected machine.
So the centralized server in control of the botnet.
Maybe it is a device owned and operated by the attacker, or it may be infected device.
So the first topology actually, which is the Star Network topology for this client server, as you
can see.
But here we have what's OK and here is the server, which is the server centralized.
We have multi cell phone network technology, which is like this, but we don't have access to a single
CMC or C a server.
We have multiple server.
OK, also we have the hierarchical network topology, which is we have the sanctionable and we have
boats and these boats have boats and so on.
All right.
Cool.
Now we have the other model, which is the peer to peer botnet to circumvent the vulnerabilities of
the client server model, but need to have more recently been designed using components of decentralized
Internet to be a file sharing in the control structure.
Inside the botnet eliminates the single point of failure present in a botnet with a centralized server.
So making mitigation efforts more difficult because this is a virtual beat after all, not like this
client server.
If the server goes down, then the whole infrastructure go down not to be so we have a massive amount
of infrastructure or not as works as our devices.
It works as a botnet now built to be robots can be both client and command centers.
So that's what we have to be.
It is very dangerous.
So working hand in hand with their neighboring nodes to propagate did.
Also appear to be an botanists maintain a list of trusted computers with which they can give and receive
communication and update their malware by limiting the number of other machines that would connect to
each, but is only exposed to adjacent devices, making it harder to track and more difficult to mitigate.
Lacking a centralized command server may appear to be a botnet more vulnerable to control by someone
other than that botnet creator to protect against loss of control, decentralized botnet are typically
encrypted so that access is limited.
Now, here is a graph for the bulletin, it appears to be.
As you can see, all of them is working either as a boat or as a ACNC ever.
So that's what make the beer to be is very dangerous.
So it's not just if we get rid of that server, then everything go down.
No, actually, each device infected with this man when we act as CNE or AZABAL, which is a huge problem
we have here.
Now, how can you protect your devices from becoming part of the botnet?
The first thing, create a secure password, so for many, that vulnerable device is reducing exposure
to botnet vulnerability can be as simple as changing the administrative credentials to something other
than the default username and password and creating a secure password mix brute force, cracking difficult,
creating a very secure mass brute force and getting virtually impossible the other way.
Allow only trusted execution of the quote.
If you adopt a mobile phone model of software execution only allow application Mayron granting more
control to terminate software deemed as malicious but included.
So only an exploitation of the supervisor software or the kernel may result in exploitation of the device.
Baryonic system-wide restores.
They're starting to nonvote state after I said time would remove any gunk.
System has collected botnet software included.
The strategy when used as a preventative measure, ensures even slightly running malware gets thrown
out with trash.
Implement a good ingress and egress filtering, other more advanced strategies include filtering practices
at network character and firewalls.
A principle of secure network design is layering.
You have the least restriction around publicly accessible resources while continually beefing up security
for things you deem sensitive.