一种基于比特信的新型僵尸网络

A new type of Botnet based on Bitmessage

无论是传统的IRC僵尸网络,还是后来出现的P2P僵尸网络,都因为命令与控制(C&C)服务器或启动(bootstrap)节点无法隐藏,而具有天然的弱点。受比特币的启发,一种新型的可用来向另一人或者多个其他订阅者发送加密消息的P2P网络协议——比特新(Bitmessage)的出现改变了这一现状。基于比特信作为僵尸网络的命令控制信道几乎无法被追踪,大大提高了僵尸网络的隐蔽性。本文提出了一种基于比特信的新型僵尸网络,通过分析其技术原理,探讨针对这种类型的僵尸网络的应对策略,以帮助读者认识这一新型安全威胁。

For both traditional IRC botnet and P2P botnet, they born with a natural weakness that the C&C server and bootstrap node are unhideable. Inspired by the encrypted currency Bitcoin, a P2P communications protocol used to send encrypted messages to another person or to many subscribers which is called BitMessage will change the situation. A com-mand and control channel of botnet based on Bitmessagecan not be tracked, which greatly improves the concealment of botnet. This paper proposes a new type of botnet based on Bitmessage. With analyzing its techical and principle, we will discuss the strategies to defense this kind of botnet which will help readers know this new security threat better.