Re: mitigating botnet C&Cs has become useless

From: Barry Shein (no email)
Date: Fri Aug 04 2006 - 02:12:58 EDT

  • Next message: Neil J. McRae: "Re: text based netflow top ASN tool?"

    I promised myself I'd never, ever post three comments on the same
    topic here, but hey...

    What I think would be a good thing would be focusing on ONE miscreant,
    some low-hanging fruit for starters. Just one. And shut him/her/it
    down, hound him off the face of the earth, get him arrested, whatever,
    put him out of business.

    And then move on to #2.

    Not that it will, one by one, get them all. But it *will* raise the
    stakes, particularly as techniques are developed.

    IMHO part of the problem is that everyone is trying to solve the
    entire problem all at once with some magic bullet.

    It's whack-a-mole in a Hilbert space, too difficult.

    -- 
            -Barry Shein
    The World              |            | http://www.TheWorld.com
    Purveyors to the Trade | Voice: 800-THE-WRLD        | Login: Nationwide
    Software Tool & Die    | Public Access Internet     | SINCE 1989     *oo*
    

  • Next message: Neil J. McRae: "Re: text based netflow top ASN tool?"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD