The power of ten - enterpriseinnovation.net

SECURITYWATCHto keep phishing Web sites active, operators changedomains frequentlytion, a group specializing in sharing informationabout botnets, reported that from 1500 to 3500 in the last two years.Each of those 3500 networks could containseveral thousands of compromisededby multiple bots.In raw numbers, the United Statesbot-infected machines, says Jose Nazario,manager of security research at ArborNetworks. “I think it’s very safe fora botnet,” he says. “It’s a very dangerousInternet for most folks.”Detecting infectionsBotnets live or die depending on com- Those communications can tell researchershow large a botnet is. Similarly, the a known bot. “Sadly, the lack of antivirusalerts isn’t an indicator of a cleansimply can’t keep up with the numberof threats. It’s frustrating [that] we don’t the average home user, more widely deployed.”-softUpdate and Windows Update, is updat-second Tuesday of each month and reports toinfection. You can use another version of the -you should run the utility if you notice a sud- Tool garners results. In September 2007,to recognize the Storm bot. Overnightthe size of the Storm botnet was reduced has since added other prevalent botnetsScribe.Proactive options are also available.Pothunter, a free program from SRI In-OS, Windows XP, and Vista. Thoughdesigned for networks, it can also run onstand-alone desktops and laptops. log of data exchanges that typically oc-an SRI International database of adware, before other security vendors picked upon the threat.Future BotnetsIf only to demonstrate their resiliency,bots have recently invaded cell phones, While a botnet on a mobile phone mayof renting out a network of “owned”phones may be viable in the near future.Regardless of the form bots might take,we probably won’t be able to eradicate termanage bot infestations. But in thewe can.www.cw.com.hkSept 2009 Computerworld Hong Kong 43