Botnet
A botnet is a network of internet-connected devices infected with malware and remotely controlled or coordinated, typically for malicious activity.
Acing the CCNA Exam: Volume 2 Advanced Networking and Security
A botnet is a group of internet-connected devices infected with malware and controlled or coordinated for malicious activity.
- How it is used
- Explains how malware-infected devices provide the distributed origin for denial-of-service attacks.
- How deep it goes
- Defines botnets and connects them to DDoS, but stops short of explaining malware infection, control mechanisms, or mitigation.
- Examples
- Uses a distributed TCP SYN flood in which half-open connections exhaust the target's connection table.
- What you can do after
- Evaluate whether a denial-of-service scenario represents a distributed attack originating from a malware-infected device group.
Read how Acing the CCNA Exam: Volume 2 Advanced Networking and Security explains botnet →
Grokking Web Application Security
A botnet is a centrally controlled network of compromised computers or other devices.
- How it is used
- Frames botnets as a post-compromise use of server resources for profit and further abuse.
- How deep it goes
- Defines centralized control and lists abuses, then briefly identifies detection signals without explaining control mechanisms.
- Examples
- Uses cryptocurrency mining, phishing emails, click fraud, suspicious files, unusual network activity, and unexplained resource spikes.
- What you can do after
- Diagnose compromised servers with network-activity scans, filesystem searches, and resource-use monitoring.
Read how Grokking Web Application Security explains botnet →
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.