detecting botnets

Detecting P2P Botnets with NetFlow (Part #1)

This is part #1 of a two part series on detecting P2P botnets with NetFlow. For years botnets such as Zeus and Spyeye made use of a centralized command and control (“C2”) server. This approach to botnet management was easily detectable using reputation services and other black-listing technology. While many botnets still use a traditional …

Detecting P2P Botnets with NetFlow (Part #1) Read More »