13. Botnet Survival

• The recipe:

  1. disable all defense mechanisms,

  2. then install undetectable bot.

• Most botnets

  • automatically replicate themselves

  • have the ability to self-update

  • download and run new versions of themselves by bot herder command

• Many have update mechanism more efficient than Windows update (frightening!)

• Viruses disable antivirus software -- most users would never notice.