Storm Worm Analysis

[Loki]

Two days ago I gave a presentation at IT-Sicherheits-Forum, a German conference on IT security, on Storm Worm. The presentation is now available. It provides an overview of Storm Worm and highlights various aspects of the botnet. The presentation is an extended version of our LEET'08 paper on the same topic.

Storm is still an interesting botnet. However, the botnet is getting smaller and smaller - nowadays there are typically less than ten thousand machines online during a typical day. Seems like the good ol' days of Storm are over...

Site : http://honeyblog.org/archives/175-Storm-Wo...esentation.html

Paper : http://honeyblog.org/junkyard/paper/08_storm_ITSF.pdf

[oricode]

Nice read. Thanks for the link pal.

Regards