Botnet command and control based on Short Message Service and human mobility

Jingyu Hua, Kouichi Sakurai

研究成果: ジャーナルへの寄稿学術誌査読

15 被引用数 (Scopus)


Many serious threats for PCs are spreading to the mobile environment. A mobile botnet, which is a collection of hijacked smartphones under the control of hackers, is one of them. With the quick development of the computing and communication abilities of smartphones, many command and control (C&C) techniques in PC botnets can be easily reused in mobile botnets. However, some particular functions and characteristics of smartphones may provide botmasters with additional means to control their mobile botnets. This paper presents two special C&C mechanisms that leverage Short Message Service and human mobility, respectively. The first one designs a SMS-based flooding algorithm to propagate commands. We theoretically prove that the uniform random graph is the optimal topology for this botnet, and demonstrate its high efficiency and stealth with various simulations. The second one utilizes Bluetooth to transmit botnet commands when hijacked smartphones encounter each other while in motion. We study its performance in a 100 m × 100 m square area with NS-2 simulations, and show that human-mobility characteristics facilitate the command propagation. Even if the infection rate is low, the command can still be effectively propagated provided that the mobility of devices is high. In the end, we propose effective defense strategies against these two special C&C mechanisms.

ジャーナルComputer Networks
出版ステータス出版済み - 2月 4 2013

!!!All Science Journal Classification (ASJC) codes

  • コンピュータ ネットワークおよび通信


「Botnet command and control based on Short Message Service and human mobility」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。