Feeds

Botnet 'pandemic' threatens to strangle the net

We're all MyDoomed

Beginner's guide to SSL certificates

Networks of of compromised PCs are threatening the smooth operation of the internet, the World Economic Forum was told this week.

Up to a quarter of online computers are virus-infected components in botnet networks of PCs under the control of hackers, according to net luminary Vint Cerf. Cerf, who co-developed the TCP/IP protocol, compared the spread of botnets to a disease that has reached "pandemic" proportions.

Cerf estimated that between 100 million and 150 million of the 600 million PCs on the internet are under the control of hackers, the BBC reports. "Despite all that, the net is still working, which is pretty amazing. It's pretty resilient," he said.

Cerf made his comments during a panel discussion on the future of the internet at the World Economic Forum in Davos, Switzerland, this week. During the debate, security columnist John Markoff, of the New York Times said one particular botnet attack consumed 15 per cent of Yahoo's search capacity for a brief period. The goal of the attack was to retrieve text snippets that were used in a attempt to disguise junk mail messages in a bid to smuggle spam past filters.

Other members of the panel including Michael Dell, founder of Dell computers, and Hamadoun Toure, secretary general of the International Telecommunication Union, agreed there was a pressing need to solve the problem. Improved operating system security and user authentication might help in this, but no "silver bullet" solution emerged during the discussion. Dell suggested greater use of network computers, or as he put it "disposal virtual PCs", might reduce the problem. Toure said greater co-operation between regulators, government, security firms, telecom providers, and end users was needed.

Botnets of compromised PCs are used by hackers for purposes such as relaying spam and launching denial of service attacks against targeted websites. In most cases users are blissfully unaware of infection, perhaps only noticing a slight degradation in performance. The problem is well recognised in internet security circles and among ISPs.

Intelligence from either the sale of access to botnet resources on the internet or from ISP takedown efforts suggests groups of 50,000 or so compromised PCs or smaller are common, by which reckoning Cerf's figures seem rather high. ®

Intelligent flash storage arrays

More from The Register

next story
UK smart meters arrive in 2020. Hackers have ALREADY found a flaw
Energy summit bods warned of free energy bonanza
DRUPAL-OPCALYPSE! Devs say best assume your CMS is owned
SQLi hole was hit hard, fast, and before most admins knew it needed patching
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Mozilla releases geolocating WiFi sniffer for Android
As if the civilians who never change access point passwords will ever opt out of this one
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Protecting users from Firesheep and other Sidejacking attacks with SSL
Discussing the vulnerabilities inherent in Wi-Fi networks, and how using TLS/SSL for your entire site will assure security.