Everything about Botnet
Collection of compromised internet-connected devices controlled by a third party
A botnet is a group of Internet-connected devices, each of which runs one or more bots. Botnets can be used to perform distributed denial-of-service (DDoS) attacks, steal data, send spam, and allow the attacker to access the device and its connection. The owner can control the botnet using command and control (C&C) software. The word "botnet" is a portmanteau of the words "robot" and "network". The term is usually used with a negative or malicious connotation. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: BotnetA 5-minute orientation
- Skim a recent paper: Imbalanced tabular data modelization using CTGAN and machine learning to improve IoT Botnet attacks detectionInfluential work since 2022
- Pick up a classic book: BotnetsThe most-reprinted book on the subject
- Read the landmark paper: Towards the development of realistic botnet dataset in the Internet of Things for network forensic analytics: Bot-IoT datasetCited 1,859 times
- Go sideways: United States v. AnchetaA closely related topic
- Go sideways: Dorkbot (malware)A closely related topic
📖 Definitions
Noun A collection of compromised computers that is gradually built up and then unleashed as a DDOS attack or used to send very large quantities of spam.
Noun (The addition of quotations indicative of this usage is being sought:) spyware
🏆 Landmark papers (most cited)
Towards the development of realistic botnet dataset in the Internet of Things for network forensic analytics: Bot-IoT dataset
N-BaIoT—Network-Based Detection of IoT Botnet Attacks Using Deep Autoencoders
An empirical comparison of botnet detection methods
Federated Deep Learning for Zero-Day Botnet Attack Detection in IoT-Edge Devices
The Brexit Botnet and User-Generated Hyperpartisan News
Botnet detection based on traffic behavior analysis and flow intervals
A Visualized Botnet Detection System Based Deep Learning for the Internet of Things Networks of Smart Cities
Botnet in DDoS Attacks: Trends and Challenges
🆕 Influential since 2022
Imbalanced tabular data modelization using CTGAN and machine learning to improve IoT Botnet attacks detection
ELBA-IoT: An Ensemble Learning Model for Botnet Attack Detection in IoT Networks
A multi-objective mutation-based dynamic Harris Hawks optimization for botnet detection in IoT
Deep Learning-Based Intrusion Detection System for Detecting IoT Botnet Attacks: A Review
Systematic Literature Review of IoT Botnet DDOS Attacks and Evaluation of Detection Techniques
📚 Books worth reading
- 📕BotnetsGeorgios Kambourakis, Marios Anagnostopoulos · 2019
Malicious botsKen Dunham · 2008
The dotCrime ManifestoPhillip Hallam-Baker · 2007
Virtual honeypotsNiels Provos, Thorsten Holz · 2007- 📕Reign of BotnetsDavid Senecal · 2024
MafiaboyMichael Calce · 2008
BotnetsHeli Tiirmaa-Klaar, Jan Gassen · 2013- 📕Anatomy of Iot Botnets and Detection MethodsUmang Garg, Neha Gupta · 2025
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- United States v. Ancheta United States of America v. Ancheta (U.S. vs. Ancheta, 06-051 (C.D. Cal.)) is the name of a lawsuit against Jeanson James Ancheta of Downey, California…
- Dorkbot (malware) Dorkbot is a family of malware worms that spreads through instant messaging, USB drives, websites or social media channels like Facebook. Code Shikara…
- BASHLITE BASHLITE (also known as Gafgyt, Lizkebab, PinkSlip, Qbot, Torlus and LizardStresser) is malware which infects Linux systems in order to launch distributed…
- Bredolab botnet The Bredolab botnet, also known by its alias Oficla, was a Russian botnet mostly involved in viral e-mail spam. Before the botnet was eventually dismantled…
- Gameover ZeuS GameOver ZeuS (GOZ), also known as peer-to-peer (P2P) ZeuS, ZeuS3, and GoZeus, is a Trojan horse developed by Russian cybercriminal Evgeniy Bogachev. Created…
- Cutwail botnet The Cutwail botnet, founded around 2007, is a botnet mostly involved in sending spam e-mails. The bot is typically installed on infected machines by a…
- Operation: Bot Roast Operation: Bot Roast is an operation by the FBI to track down bot herders, crackers, or virus coders who install malicious software on computers through…
- Microsoft Digital Crimes Unit The Microsoft Digital Crimes Unit (DCU) is a Microsoft sponsored team of international legal and internet security experts employing the latest tools and…