Propagation Model for Botnet Based on Conficker Monitoring

Conficker is a worm outbreak recently which form a large botnet and became a huge threat to the security of the internet. In this paper, the redirect technology of domain name was used to monitor the conficker. For it´s low killing rate and long-term period of propagation, we built a propagation model of botnet based on conficker monitoring. In the model, we take into account the geography, connectivity and other factors cause difference in propagation capacity of computer, and finally verified the validity of the model with the real monitoring data.