[nsp-sec] Hitpop Chinese DDoS Bot Analysis [PDF]

[jose nazario]

Folks

Here's a writeup of a Chinese-language DDoS bot we've been tracking. This is
a SENSITIVE VERSION and not for open distribution. Please keep it on list or
in your team. This version contains significant details that are not fit for
general consumption.

A public version is going up shortly.

Note that none of the Hitpop nets we've been monitoring participated in the
CNN attacks last month.

-- jose

-------------------------------------------------------------
jose nazario, ph.d.  <jose at arbor.net>
security researcher, office of the CTO
Arbor Networks
v: (734) 821 1427
PGP: 0x40A7BF94
www.arbornetworks.com
-------------------------------------------------------------