Botnets are the Best Way to Measure User-Hostile Behavior on the Internet

Presented at A New HOPE (2022), July 22, 2022, 4 p.m. (50 minutes).

Today there are two dominant approaches to measuring behavior at scale on the web without the cooperation of service providers: there are bot farms, which run automated browsers on infrastructure controlled by the measurer; and there are instrumented extensions that run on the browsers of individuals who have agreed to participate.<br><br>Bot farms are bad because it's hard to measure everything that is interesting to study in a fully automated way; extensions are bad because for them the measurements follow the participant's use of the service, whereas directly controlling what is measured is often useful in a study (plus, there are privacy risks).<br><br>The best way to measure behavior on the web is with a botnet. Botnets are distributed over participant computers, so bots can mix in requests to a human alongside automated measurements. On the other hand, where bots go, and what they ask about, is fully specifiable in a botnet study.<br><br>In this talk we'll see how best to build a measurement botnet: isolating the bot on the participant's system, deciding when to run, deciding when to ask for human help and how to share achievements with them, and avoiding detection as a bot to improve study validity.<br><br>At the end, there will be a discussion about why any of this matters: botnets have always let individuals cooperate to participate in causes they believe in, from fighting COVID-19 with @home, to DDoS as political action, to breaking weak ciphers with distributed.net. That's true of measurement botnets too. There is little awareness today of actions taken against our interests: botnets can help.<br>

Presenters:

• David Sidi
  **David Sidi** is trying to think about privacy in new ways while researching, developing, and applying information technologies for privacy and security. In addition to measurement botnets, his other current projects focus on anonymity and planning for future security with Colombian news organizations.

Links:

• https://scheduler.hope.net/new-hope/talk/FCHFRE/
• https://infocon.org/cons/2600/A New HOPE (2022)/A New HOPE (2022) Botnets are the Best Way to Measure User-Hostile Behavior on the Internet.mp4
• https://infocon.org/cons/2600/A New HOPE (2022)/A New HOPE (2022) Botnets are the Best Way to Measure User-Hostile Behavior on the Internet.srt (subtitles)

Similar Presentations:

• Still Hacking Anyway (SHA2017) / Parkour communications: How you can communicate, free running style, using nothing but the 'fixtures' of the Internet.
• Black Hat Asia 2021 Virtual / The Rise of Potatoes: Privilege Escalations in Windows Services
• Black Hat Asia 2021 Virtual / Threat Hunting in Active Directory Environment