Botnets: Size isn't everything, says new report

European researchers say botnet-size estimates are often exaggerated and do little to assess the real scope of the threat

Published figures estimating the size and scope of botnets are often inaccurate and do not reflect the threat these compromised networks pose to security, according to research released this week by ENISA, the European Network and Information Security Agency.

The study on botnets, which are networks of ordinary computers controlled by cybercriminals, and the threats they pose, looks at the reliability of botnet size estimates and says the total annual global economic loss attributed to malicious software activities is estimated at more than US$ 10 billion.

See also: Smartphone botnets: Report predicts mobile devices will be part of DDOS attacks

"A shift in the motivation for the creation of malicious software has led to a financially-oriented underground economy of criminals acting in cyberspace," the report states.

MORE ON THE BOTNET WAR

* What a botnet looks like

* The botnet hunters

* Report: Rustock still top dog among spam botnets

* With botnets everywhere, DDoS attacks get cheaper

Among the many activities botnet's are responsible for, sending out spam and taking part in denial-of-service attacks are some of the more well-known. The report's authors say existing approaches to measuring the size of botnets are often wildly off-base because there is a high incentive for exaggeration.

"Media attention, publicity and interest in receiving financial support are strongly correlated with the level of threat published," the report states. "Over the last few years, the term 'threat level' has been almost exclusively associated with the size of botnets. Well-known reported figures for botnet sizes that caught major media attention ranged from around 7-9 million bots for Conficker, over 13 million bots associated with Mariposa and up to 30 million infected machines in the Bredolab botnet. As big numbers imply big threats, therefore high attention, there is a significant incentive for overestimation."

"The botnet numbers define the political agenda and they determine 100's of millions of Euros of security investments -- we should understand what is behind them," says Dr. Giles Hogben, the report's editor. Hogben also said the size of a botnet is only one way to factor the threat it poses.

"Size is not everything -- the number of infected machines alone is an inappropriate measure of the threat," said Hogben.

Researchers suggest several tactics to mitigate the threat of botnets, including incentives for Internet Service Providers for detection efforts, and improvements in botnet identification, monitoring and malware analysis.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags securityantispamEuropean Network and Information Security Agency

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Joan Goodchild

CSO (US)
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?