2007-03-25 Buy the botnet book hackers are already stealing!

***Author's guide to why you might find this book useful***

According to the Symantec Internet Threat Report for Jan-Jun 2006, the UK was the 3rd most likely target of botnet driven DDoS attacks. It was also ranked third in the world for the number of bot infected computers. For the number of attacks which originate in a country, the UK ranked 4th.

Think it's time to find out what's up with all these botnets? Botnets-The Killer Web App will bring you up to speed.

The UK's David Harley contributed his expertise on Botnet Detection along with a collection of international experts, Gadi Evron (Israel), Carsten Willems (Germany), Tony Bradley (USA), Michael Cross (Canada), Jim Binkley (USA), and Craig Schiller (US)

If you are a IT type that needs to come up to speed about botnets quickly, as well as find out what tools and resources are available, this book's for you. If you are a manager that needs to know what the techies are talking about regarding bots, this book's for you. If you are in tech media and need a crash course, this book's for you.

The overviews in chapters 1 and 2 are intended as a presentation resource for management and awareness presentations. They should also help techs understand the big picture.

Chapter 10 on the CWSandbox is so good, the vendor for CWSandbox (Sunbelt Software) is now including it with each copy of CWSandbox they sell.

Chapters 6-9 provide an in-depth discussion of techniques to detect botnets using network traffic analysis as used in the open source ourmon tool. Network security types will probably get the most out of chapters 3, and 5-11.

Chapter 4 was intended as a reference on bot families and capabilities. The material isn't new but it is gathered in one place (with permission) for ease of reference.

If you want to begin analyzing the bot phenomena to formulate potential response strategies, this book is a good starting point. You'll like chapter 12, especially like the adaptation of the Financial Services Technology Consortium (FSTC) Phishing Solutions Categories to the botnet problem.