Botnet

As explained in Acing the CCNA Exam: Volume 2 Advanced Networking and Security

A botnet is a group of internet-connected devices infected with malware and controlled or coordinated for malicious activity.

A botnet is a group of devices infected with malware and used to attack a target in a distributed manner. section 11.2.1 section 11.6

Botnets enable distributed denial-of-service (DDoS) attacks, rather than attacks originating from a single device. Their traffic can overwhelm a system, service, or network and make it unusable. section 11.2.1 section 11.6

Distributed SYN flood

A botnet floods a target with TCP SYN messages. The target creates half-open connections while waiting for final ACK messages; its connection table fills, preventing legitimate connections. section 11.2.1

Figure 11.2 A TCP SYN flood attack—an example of a DoS attack. (1) The target is flooded with SYN messages and (2) replies with SYN-ACK messages. (3) The half-open TCP connections prevent the target from accepting legitimate TCP connections.

Trace how a distributed botnet attack contributes to a TCP SYN flood and prevents legitimate connections. section 11.2.1

How Acing the CCNA Exam: Volume 2 Advanced Networking and Security covers it

How deep it goes

Defines botnets and connects them to DDoS, but stops short of explaining malware infection, control mechanisms, or mitigation.

Examples

Uses a distributed TCP SYN flood in which half-open connections exhaust the target's connection table.

What it assumes

Builds on denial-of-service attacks and TCP SYN flooding while defining the botnet term directly.

What you can do after

Evaluate whether a denial-of-service scenario represents a distributed attack originating from a malware-infected device group.

How it connects

Connects botnets to malware, denial-of-service attacks, distributed denial-of-service attacks, and SYN flood attacks.

liveBookmanning.com

Read Acing the CCNA Exam: Volume 2 Advanced Networking and Security on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Grokking Web Application SecurityA botnet is a centrally controlled network of compromised computers or other devices.

Compare how 2 books explain botnet →

This explainer was generated by Manning's knowledge graph from the text of Acing the CCNA Exam: Volume 2 Advanced Networking and Security. The section links point to the parts of the book it draws on.