Command and control (malware): Difference between revisions

Revision as of 22:20, 13 January 2017

Revision as of 01:23, 14 January 2017

Line 19:

Botnet servers are typically redundant, linked for greater redundancy so as to reduce the threat of a takedown. Actual botnet communities usually consist of one or several controllers that rarely have highly developed command hierarchies; they rely on individual peer-to-peer relationships.<ref>{{cite web|title=what is a Botnet trojan?|url=http://www.dslreports.com/faq/14158|publisher=DSL Reports|accessdate=7 April 2011}}</ref>

The botnet server structure mentioned above has inherent vulnerabilities and problems. For example, finding one server with one botnet channel can often reveal the other servers, as well as their bots. A botnet server structure that lacks [[redundancy (engineering)|redundancy]] is vulnerable to at least the temporary disconnection of that server. However, recent [[IRC server]] software includes features to mask other connected servers and bots, eliminating that approach.{{citation needed|date=February 2015}}

===Peer-to-peer===