An Adaptive Push-Styled Command and Control Mechanism in Mobile Botnets  

作　　者：CHEN Wei GONG Peihua YU Le YANG Geng 

机构地区：[1]College of Computer, Nanjing University of Posts and Telecommunications

出　　处：《Wuhan University Journal of Natural Sciences》2013年第5期427-434,共8页武汉大学学报（自然科学英文版）

基　　金：Supported by the National Natural Science Foundation of China (61202353, 61272084, 61272422);Graduate Innovation Foundation of Jiangsu Province (CXLX13_464);Natural Science Foundation of Jiangsu Higher Education Institutions (12KJB520008)

摘　　要：The mobile botnet, developed from the traditional PC-based botnets, has become a practical underlying trend. In this paper, we design a mobile botnet, which exploits a novel command and control （CC） strategy named Push-Styled CC. It utilizes Google cloud messaging （GCM） service as the botnet channel. Compared with traditional botnet, Push-Styled CC avoids direct communications between botmasters and bots, which makes mobile botnets more stealthy and resilient. Since mobile devices users are sensitive to battery power and traffic consumption, Push- Styled botnet also applies adaptive network connection strategy to reduce traffic consumption and cost. To prove the efficacy of our design, we implemented the prototype of Push-Style CC in Android. The experiment results show that botnet traffic can be concealed in legal GCM traffic with low traffic cost.The mobile botnet, developed from the traditional PC-based botnets, has become a practical underlying trend. In this paper, we design a mobile botnet, which exploits a novel command and control （CC） strategy named Push-Styled CC. It utilizes Google cloud messaging （GCM） service as the botnet channel. Compared with traditional botnet, Push-Styled CC avoids direct communications between botmasters and bots, which makes mobile botnets more stealthy and resilient. Since mobile devices users are sensitive to battery power and traffic consumption, Push- Styled botnet also applies adaptive network connection strategy to reduce traffic consumption and cost. To prove the efficacy of our design, we implemented the prototype of Push-Style CC in Android. The experiment results show that botnet traffic can be concealed in legal GCM traffic with low traffic cost.

关 键 词：mobile botnet push style Google cloud messaging （GCM） adaptive connection 

分 类 号：TN91[电子电信—通信与信息系统]