The Research And Experiment Of Botnet Anti-tracking Technology Based On Cloud Platform

With the continuous development of network attack methods,botnet as a new attack platform has become a serious threat to network security on the In-ternet.At the same time,the coming of cloud computing era has also attracted the attention of botnet developers.Cloud platforms provide stable,flexible and reliable computing resources with high quality.If such resources are taken by the botnet,they would be a serious threat to network security.Therefore,the research about cloud based botnet is essential.This thesis aims to develop a botnet based on cloud computing platform and study anti-tracking technology.The system will help security researchers test and improve methods on botnet.The system not only has the ability of penetration like traditional botnets,but also can use cloud host to build the botnet.The botnet is based on a communication and control model which has a high efficiency addressing mechanism and reliable authentication system.And it is also integrated by an anti-tracking subsystem with a variety of advanced botnet anti-tracking technology.The existing network tracking systems are hard to work on it.In this thesis,a botnet based on cloud platform is designed and imple-mented as a combination of the botnet and cloud platform security.The system is an experimental platform for network security which integrated with a series of anti-tracking methods.It can help researchers to verify and test their botnet detection and defense technology.As a foundation of botnet,this thesis pro-poses a P2P botnet communication protocol based on Kademlia which has a highly effective addressing and a robust network topology.On the top of this protocol,this thesis designs a multi-level encryption and authentication system to protect the botnet from outside attacks and hijack.For the spread of bots,this thesis not only implements vulnerability exploit technology target to multi-platforms,but also proposes a method to capture cloud hosts automatically and build the botnet with these cloud hosts.This botnet also use technology like IP spoofing,loose source routing and the onion router to protect itself and hides the bootstrap nodes with Fast-flux.Tests show that the botnet has a strong ability of anti-tracking.It has a great significance for the research of botnet detection and defense.