Framework for design of Graybot in social network

摘要

The increased use of Internet in all areas of life has resulted in different types of Internet threats that has transformed from attacks which disable infrastructure to those which affect people and organizations. Botnet is a major internet threat and the command and control architecture of botnet differentiates it from other types of malwares. Botnet is a collection of compromised computers in a network under the command and control of attacker called botmaster. This paper proposes a botnet that uses Twitter for its command and control. The botmaster uses the fake account to post tweets which includes the encrypted commands. The infected machines called botclients obtains these tweets, decrypts the encrypted command in the tweet and launch attacks in the infected machines. The key used for encrypting the communication between the botserver and botclients is obtained using Diffie Hellman Key Exchange. The functionality and implementation of proposed botnet helps to understand about how social networking sites can be used for botnet command and control and about the destructive nature of botnet attacks.