427 Botnet fm qxd

www.syngress.com
Intelligence Resources • Chapter 11
399
427_Botnet_11.qxd 1/9/07 9:56 AM Page 399

---

Figure 11.3
Information on Backdoor.IRC.Bot on Symantec Web Site
Professional and Volunteer Organizations
In addition to the organizations that are in the business of virus, malware, and
spyware removal, numerous professional and volunteer organizations provide
noteworthy and comprehensive information on security issues like botnets.
Some of the groups on the Internet that provide useful, timely information
on botnets and other security-related issues, and/or provide access to intelli-
gence gathered by other security professionals, include:
■
EDUCAUSE
www.educause.edu
■
North American Network Operators Group (NANOG)
www.nanog.org
■
Shadowserver
www.shadowserver.org
EDUCAUSE
EDUCAUSE is an organization whose membership consists of those who
service or are part of educational organizations. Membership includes 
www.syngress.com
400
Chapter 11 • Intelligence Resources
427_Botnet_11.qxd 1/9/07 9:56 AM Page 400

---

colleges, universities, and other educational groups, and corporations that
serve the Information Technology needs of higher education.They host con-
ferences and provide discussion groups, documents, and other resources that
deal with a wide variety of topics.
NANOG
The North American Network Operators Group (NANOG) is an organiza-
tion that focuses on backbone/enterprise network technologies and their
operational practices.They provide conferences, tutorials, mailing lists, and
other resources that allow the dissemination of security information to reach
its membership. Links to tutorials and other information available for the
public to view can also be accessed through their site.
Shadowserver
Shadowserver is a volunteer organization that focuses on gathering intelli-
gence on electronic fraud, malware, and botnets, inclusive to collecting, ana-
lyzing, tracking, and reporting on their activity.They are highly involved in
acquiring information on these threats, to the point of disassembling viruses
and Trojans, reporting attackers, and alerting other professionals of these
threats. Up-to-date statistics, whitepapers, and other information are available
to the public on their site, and mailing lists that send reports and other infor-
mation to your e-mail address.There are also discussion lists that allow you to
discuss security topics with other professionals.
Notes from the Underground…