P2p-based Botnet Research And Implementation

Botnet is the hottest network attacking and defense topic on the internet,which is currently the most destructive and concealment means of attacking. Early Botnet mainly used a centralized command and control mechanism. Such Botnet built command and control channel using IRC protocol. but Botnet technology based on IRC protocol is relatively mature, and this kind of Bot's survival is poor, because the IRC protocol has a weak security. Therefore, presently Botnet control technology is gradually transformed to P2P, but now the P2P-based Botnet exists defective in network control and security and can not fulfill the needs of network attacking and defense.I had researched on the development status and characteristics of two kinds of technology-Botnet and P2P technology, and discussed the new direction of Botnet-P2P-based Botnet, Analysised and compared the strengths and weaknesses of the existing P2P Botnet. In thispaper I focused on the communications, control, maintenance,updates and other issues of structured P2P-based Botnet in the communications, which is important for design and implementation of the new P2P-based Botnet system. Then I summarized the requirements of Botnet and designed a P2P-based Botnet communication mechanism-ChordBot. ChordBot improved the structured P2P networks-Chord, making it more suitable in Botnet on the network robustness, controllability, safety and other requirements. Finally I introduced the design and realization of ChordBotnet. This system includes Control side,Server,Bot and Database. The Server assigns a unique ID to each node which is based on the IP address.The control side only need to know the ID of the destination node,and then the Commands will send to the destination node through the network system command routing mechanism. At the end, I analyzed the performance of the system,which proved the system fulfill the design expectation and goals.