427 Botnet fm qxd

Q: 
Are the best sources of intelligence on the Internet?
A: 
Not necessarily. Many sites can provide disinformation, and some hacking
sites may attempt to install malicious software on your computer when
you visit them or install a program from their site.You need to be careful
wherever you visit on the Net, and attempt to verify information as true.
This isn’t really a problem with established sites that work hard to dissemi-
nate accurate information. Of course, you also shouldn’t underestimate the
value of a book, which is obviously free of anything that will infect your
system.
Q: 
I’d like to take a more serious role in combating botnets. What steps
should I take?
A: 
Visit sites like Shadowserver to view how to capture data and become
involved in gathering intelligence. Information on the Shadowserver site
www.syngress.com
414
Chapter 11 • Intelligence Resources
Frequently Asked Questions
The following Frequently Asked Questions, answered by the authors of this
book, are designed to both measure your understanding of the concepts pre-
sented in this chapter and to assist you with real-life implementation of these
concepts. To have your questions about this chapter answered by the author,
browse to 
www.syngress.com/solutions
and click on the 
“Ask the Author”
form. 
427_Botnet_11.qxd 1/9/07 9:56 AM Page 414

---

provides instructions on creating honeypots, and (like numerous other sites
dealing with Trojans and viruses) the ability to upload a botnet you’ve dis-
covered.
Q: 
I’d like to join a membership organization, but I’m unsure if I have the
qualifications?
A: 
Membership organizations aren’t only for topnotch security professionals.
They provide a forum for professionals to exchange information, ask ques-
tions, learn from the experience of others, and expand the capabilities of
combating botnets and other threats. Check the Web sites of membership
organizations and see if you meet their criteria. Some organizations will
even make exceptions on a case-by-case basis.