Research Publications

White Papers and Presentations

	The Opt-In Botnet Generation
	The Command Structure of the Aurora Botnet: History, Patterns, and Findings
	Extracting CnC from Malware: The Role of Malware Sample Analysis in Botnet Detection
	Serial Variant Evasion Tactics: Techniques Used to Automatically Bypass Antivirus Technologies
	Botnet Communication Topologies: Understanding the intricacies of botnet Command-and-Control
	OWASP AppSec 2009 Krakow – Factoring Malware and Organized Crime in to Web Application Security (Audio)
	OWASP AppSec 2009 Krakow – Factoring Malware and Organized Crime in to Web Application Security (Presentation)
	The Botnet vs. Malware Relationship: The One-to-One Botnet Myth
	Update on the Enemy– A Deconstruction of Who Profits from Botnets
	BlackHat 2008 – Alternative Medicine: The Malware Analyst's Blue Pill
	BlackHat 2008 – Alternative Medicine: The Malware Analyst's Blue Pill (Presentation)

Kraken Information

Damballa announced the discovery of the Kraken botnet in April of 2008. We continue to provide the following information to the public so that anyone affected by Kraken can take appropriate steps to minimize the threat.

Kraken white paper (04/09/08)

Kraken discovery research notes (04/09/08)

Kraken remediation information (04/09/08)

Damballa announces discovery of Kraken BotArmy (04/07/08)