Research On Mobile Botnet Technology And Defensing Approaches For Android Systems

The traditional Internet botnet is a network of malicious attacks by controlling a large number of hosts infected with the Bot process. In recent years, with the development of communication networks and the popularity of smart phones, the botnets develop to mobile phones and other mobile intelligent terminal equipment, forming a mobile botnet, also known as mobile phone zombie network. Botnet nodes evovle from the traditional computer into mobile phones and other mobile intelligent terminal, the controller of mobile botnet conduct malicious behavior by manipulating infected phones and other mobile intelligent terminal through the command&control channel. At present, the researches in this area is still in the initial stage, in mobile phone botnet is still relatively a few research, also lack of effective application of a wide range of defensive measures. This thesis aims to design an effective approach of a wide range to defense the mobile phone botnet by existing technology through researching the key technology of mobile botnet.The thesis analyzes the safety of the Android system and deficiencies of the Android security system, and combines the key technologies of traditional botnets, analyzes the characteristics and architecture of the mobile phone botnets, studies the malicious behavior of a typical mobile phone botnet. On this basis, the thesis proposes effective solutions from the construction of mobile botnets, the command & control (C&C) channel of mobile botnets and the defense countermeasures of the mobile phone botnets.(1) For mobile botnet construction techniques, the thesis researches on the technologies of spreading of mobile botnet and the infecting of mobile botnet, proposes a propagation model based on SMS, and focuses on the Android botnet infection technologies.(2) For mobile botnet command and control channels, the thesis designs the SMS-based C&C channel, presents a B/S/C mode of C&C channel after considering the characteristics of mobile communication and the disadvantages of the traditional communication model.(3) From the viewpoints of phone and network, based on the needs and the existing technologies in my work, the thesis studies mobile botnet defense strategies, designs and achieves defense strategies by disrupting the construction process of mobile botnet and command & control channel of mobile botnet.(4) The thesis proposes an approach to discover the mobile phone botnet by putting a mobilephone infected with the Bot process into the mobile botnet, designs and achieves a method to find a mobile botnet by analyzing the content of cell phone text messages, then improves the efficiency of the method by changing the way to collect short-messages.