|
Division of IT: Security
Make IT Safe: Attack of the Bots!
Almost everyone has heard of computer viruses and the dangers they pose. However, there's a new threat in computer securitybotnets. "Bot" is a term for a computer that has been infected by a virus that allows it to be controlled remotely. The machines that are infected are also called "zombies", because the hacker who remotely controls the virus has total control over the infected computer. These hackers are called "bot herders".
Botnets are networks composed of millions of infected computers. The bot herder can use these machines to do many things. Bots can be programmed to send spam or attack Web sites in mass in order to knock that Web site off the Internet. They can serve pop-up ads, download new content or updates to the infected machine, log keystrokes and steal passwordsbasically, anything the bot herder wants to do. Usually, the goal is to control computers and computing resources.
Bots are spread much like regular computer viruses. They usually enter your system through a security vulnerability and then install themselves. Next, they set up a secure connection channel to communicate with the bot herder. Then, they wait for commands from their master. It's often hard to tell if you have been infectedmany computers may experience slower performance but little or no effect that is noticeable to the end user. However, the machine is still being controlled by the bot herder and used for illegal purposes.
There are some simple ways to protect yourself from unwittingly joining a botnet:
- Don't click on attachments in e-mail. Many bots are spread as e-mail attachments.
- Don't click on instant messages (IM) from unknown sources. IM programs are increasingly being used to spread bot infections.
- Run anti-virus software and keep it updated. Symantec AntiVirus is available at no charge to University faculty, staff.
- Keep your operating system up-to-date. Bot programs often use vulnerabilities in operating systems to find their way onto your system.
|