Journal of Computers, Vol 7, No 1 (2012), 235-243, Jan 2012
doi:10.4304/jcp.7.1.235-243

The Design of SMS Based Heterogeneous Mobile Botnet

Guining Geng, Guoai Xu, Miao Zhang, Yanhui Guo, Guang Yang, Cui Wei

Abstract


Botnets have become one of the most serious security threats to the traditional Internet world. Although the mobile botnets have not yet caused major outbreaks worldwide in cellular network, but most of the traditional botnet experience can be transferred to mobile botnet on mobile devices, so mobile botnet may evolve faster since techniques are already explored. From the theoretical work of some researchers and the reports of security companies, we can see that the mobile botnet attacks and trends are quite real. In this paper, we proposed a SMS based heterogeneous mobile botnet, and shown how SMS based C&C channel structure can be exploited by mobile botnets. At last, we give the analysis of connectivity, security and robustness evaluation of our model.


Keywords


heterogeneous, mobile botnet, SMS, C&C, robustness

References


Geer D, “Malicious bots threaten network security,” IEEE Computer, 2005,38(1):18-20.
http://dx.doi.org/10.1109/MC.2005.26

LiPeng Song, Jin Zhen, GuiQuan Sun, “Modeling and analyzing of botnet interactions,” Physica A 390 (2011) 347–358.
http://dx.doi.org/10.1016/j.physa.2010.10.001

LiPeng Song, Jin Zhen, GuiQuan Sun. “Influence of removable devices on computer worms: Dynamic analysis and control strategies,” Computers and Mathematics with Applications 61 (2011) 1823–1829
http://dx.doi.org/10.1016/j.camwa.2011.02.010

Lee WK, Wang C, Dagon D,” Botnet Detection: Countering the Largest Security Threat,” New York: Springer-Verlag, 2007.

Norman ASA. Mobile phone threats - hype or (finally) truth? Security Articles -Archive, 2009. http://www.norman.com/security_center/security_center_archive/2009/67174/en, read: 2009.05.31.

Irfan Asrar. Could sexy space be the birth of the sms botnet? Symantec, Internet blog, jul 2009. http://www.symantec.com/connect/blogs/ could-sexy-space-be-birth-sms-botnet, read: 2009.07.30.

Ikee.B, http://www.symantec.com/securityresponse/writeup.jsp?docid=2009-112217-4458-99.

P.A. Porras, H. Saidi, V. Yegneswaran, “An Analysis of the iKee.B iPhone Botnet,” in Proceedings of the 2nd International ICST Conference on Security and Privacy on Mobile Information and Communications Systems (Mobisec), May 2010

A. Mehrotra and L.S. Golding. Mobility and security management in the gsm system and some proposed future improvements. Proceedings of the IEEE, 86(7):1480-1497, Jul 1998.
http://dx.doi.org/10.1109/5.681375

BBOS_ZITMO.B http://about-threats.trendmicro.com/ Malware.aspx?language=us&name=BBOS_ZITMO.B

M. Rajab, J. Zarfoss, F. Monrose, and A. Terzis. A multifaceted approach to understanding the botnet phenomenon. In Internet Measurement Conference, 2006.

P.Traynor, M.Lin, M.Ongtang, V.Rao, T.Jaeger, P.McDaniel, and T.L.Porta, “On cellular botnets: Measuring the impact of malicious devices on a cellular network core,” in Proceedings of the 12th ACM Conference on Computer and Communications Security (CCS’09) K. Singh, S. Sangal, N. Jain, P. Traynor, and W. Lee, “Evaluating bluetooth as a medium for botnet command and control,” in Proceedings of the International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA 2010). J. Serror, H. Zang, and J. C. Bolot. Impact of paging channel overloads or attacks on a cellular network. In Proceedings of the ACM Workshop on Wireless Security (WiSe), 2006. Anne Ruste Flø, Audun Jøsang. “Consequences of Botnets Spreading to Mobile Devices,” short-paper Proceedings of the 14th Nodic Conference on Secure IT System (NordSec 2009). David Dagon, Guofei Gu, Cliff Zou, Julian Grizzard, Sanjeev Dwivedi, “A Taxonomy of Botnets,” University of Central Florida, 2005. Anne Ruste Flø, Audun Jøsang. “Consequences of Botnets Spreading to Mobile Devices,” short-paper Proceedings of the 14th Nodic Conference on Secure IT System (NordSec 2009). G. Gu, R. Perdisci, J. Zhang, and W. Lee. Botminer: Clustering analysis of network traffic for protocol- and structure- independent botnet detection. In Security, 2008.

Yuanyuan Zeng, Xin Hu, Kang G. Shin, “Design of SMS Commanded-and-Controlled and P2P-Structured Mobile Botnet”, The University of Michigan, Ann Arbor, MI 48109-2121, U.S.A. 2009.

P. Wang, S. Sparks, and C. C. Zou. An advanced hybrid peer-to-peer botnet. In USENIX Workshop on Hot Topics in Understanding Botnets (HotBots’07), 2007.

R. Vogt and J. Aycock. Attack of the 50 foot botnet. Technical report, 2006.

P.Maymounkov and D. Mazieres, “Kademlia: A peer-to-peer information system based on the xor metric,” in IPTPS, 2002.


Full Text: PDF


Journal of Computers (JCP, ISSN 1796-203X)

Copyright @ 2006-2013 by ACADEMY PUBLISHER – All rights reserved.