Design And Implementation Of Controllable Botnet Based On Android Platform

With the growing improvement of cellphone hardware and the market share in Android, more and more hackers focus on the android mobile phone. In the present, the safety problems of mobile terminal are unrare, which attracts wide concerns of researchers. This paper deeply researched controllable botnet based on Android platform, mastering the implementations and operation machenism of botnet and discussing the controlling strategies of kinds of botnets. This proovides an attack platform of Android phones security software.This paper mainly based on three strategies, namely independent and isolated experimental environment, communication data encryption, automatically destroyed of botnets,which ensure the system’s security, no harmfulness and controllability.This paper, through the research and analysis of the existing malicious codes, accomplishing design and implementation of carrier application and botnet program. The botnet program hide in a course management system as a carrier through the means of codes obfuscation. A botnet program include five major modules: access to users’information, send messages in the background, make calls in the background, initiate a DDOS attack to specified IP and data processing. The data processing module contains two submodules, like uploading users’ information and parsing control commands.I use the WEB server as a control terminal for controllable botnet in Android platform, and take Tornado as server framework which has asynchronous interactive access function. It finally implements three major modules, such as display information, release command interface and database design. Information display and commands release are used for controller login, controlled phones’ information display and visualization of commands issued. The database module saves users’information and control commands in JSON format with MongoDB. The communication control module realizes control command issued through improving the polliing mechanism based on HTTP protocol.Test results show that the Android mobile terminal and the WEB control of this system can be stable operation, and it can perform the related functions according to control commands. Carrier used in the performance tests of each version of Android phones also showed good performance, which contains botnet program. In the real environment, the system can also run normally andcan achieve the desired effect.