Command and control (malware): Difference between revisions

Revision as of 23:13, 1 April 2016

Revision as of 20:42, 16 June 2016

Line 11:

===Client–server model===

[[Image:Server-based-network.svg|thumb|200px|A network based on the client-server model, where individual clients request services and resources from centralized servers]]

The Client–server model appeared on the first types of botnets that appeared online and has usually been built on Internet Relay Chat or by using Domains or Websites which will have the commands listed for the botnet to be controlled. In IRC commandsCommands tend to be simpler and botnets tend to be smaller if built on an IRC network.

Since IRC networks require lowbandwithlow bandwidth and use simple methods for communication they have been also used to host botnets and are tend to simple in construction and have been used many times for coordinating DDoS attacks or spam campaigns while switching channels to avoid being taken down. Although blocking certain keywords has sometimes proved effective in stopping a botnet based on IRC.

Most of the largest botnets that have been built tended to use domains rather than IRC in their construction.(see [[Rustock botnet]] see also [[Srizbi botnet]].)