Industry


Ads by TechWords

See your link here


Douglas Schweitzer's picture
Douglas Schweitzer

The Security Sector

What's a "bot," you ask?

For those of you unfamiliar or unsure of the term, a bot's essentially just another term for an infected computer.  According to this article, the FBI announced yesterday that they've identified over a million bots, which led them to arrest of three of the men they say are responsible. Surprisingly, most users remain unaware that their personal computers have become bots within "botnets" (large numbers of hijacked computers) and are under the control of "bot herders" (a self-explanatory term). Compromised systems that repeatedly reboot and/or freeze are one thing, but it seems some of the infected systems were at hospitals, which caused disruptions in medical services to patients.  When people's lives are put in jeopardy, I'm glad to see the FBI come in and lay down the law. Actually, the FBI has been trying to tackle this problem for a while now as part of its so called "Operation Bot Roast". The question comes up though, will they really be able to make that much of a difference? 

What People Are Saying

Good retort!

Good retort!

I think you said essentially

I think you said essentially because you said essentially.

Why do you think I said

Why do you think I said essentially and not actually? I was just trying to keep things simple and lead the reader into the actual blog.

Now for the fun part...

This blog isn't about the precise defintion of "bot" but more about the problem and the FBI's involvment in the area. The title was just a grab line. Next time I'll use Zombie instead if it makes you feel better.

What Doug is referring to as

What Doug is referring to as a 'bot' used to commonly be called a zombie and I actually like that term better because it infers mindless actions and a 'bot' or 'zombified' computer doesn't take nefarious actions of its own accord, a 'bot herder' pulls its strings and gives it commands. Farnum has a good point that there are good bots and bad bots and for the remainder of my comment, my use of 'bot' infers the nasties.

I think the argument would benefit from actually differentiating between a bot or zombie and the more simplified term 'compromised computer.'

A bot or zombie is a compromised computer that is controllable by a remote entity. A machine compromised by Code Red is not a bot or zombie but is still a compromised computer. If a machine compromised by Code Red contacted a command and control (C&C) mechanism, then it would be a bot or zombie.

Therefore the argument isn't mere semantics. It's an argument of accuracy and if you're going to offer a definition of something to the public assuming they don't already know what it is, you need to be specific and accurate.

"What's a truck?" Its an automobile. Does that define a truck? Sure, but it doesn't extend anyone's knowledge too far.

Let's get real here.

Let's get real here. Software needs hardware to run on and harware needs software to tell it what to do. Therefore, there is a kind of "symbiotic" type relationship between the two. Sure a "bot" can be good or bad and while it may be "software" in the true definition of the word, once a bad one takes over your machine you won't care about any of this type of nonsense you'll just want it out!

Douglas, Actually, it is a

Douglas,

Actually, it is a common misconception that a bot is the infected computer. The bot is the program that is infecting the computer. Actually, a bot is not necessarily malware. Bots can have legitimate uses, such as spiders that crawl the web for a search engine. Basically, a bot is a program that performs menial tasks that a human doesn't want to perform or is unable to efficiently perform (even if that means attacking a network or sending spam).

The term "bot" is taking on the same negative connotation that the term "hacker" is taking on, and that is unfortunate. At least a bot doesn't have feelings. :)

Michael R. Farnum

Better to be despised for too anxious apprehensions than ruined by too confident a security.
Edmund Burke (1729 - 1797)

Semantics? Bots can have

Semantics?

Bots can have legitimate uses, such as spiders that crawl the web for a search engine.

If search engines gather their data by planting software in unprotected machines out in the net, this is news to me, and I sincerely hope it ain't so. (Especially as one function of malware bots is to look for more uninfected and unprotected PCs to spread to.)

If you mean that the search company owns lots of computers that run programs (spiders) that explore the web to gather data, this I believe; but I can't think of any sense in which these are "bots", unless you expand the term to mean any automatic ("robotic") software that operates independently of human control to do some highly repetitive action.

Oh, hey. I see rereading your paragraph that this is pretty much how you define a "bot". I think we need a term for the malware version, and for me "bot" is just just the right word. And I say this as someone who once was a very happy hacker in the old sense of that word.

Semantics!

Semantics!