Domain generation algorithms have been used in commodity malware for obscuring and adding resiliency to command and control infrastructure for years. This talk will present the application of a brute forcing algorithm designed specifically for attacking weaknesses in Ramnit's generation algorithm. Using this technique we were able to identify and further study Ramnit variants (based on DGA seed)
Anthony Kasza is a Security Researcher at OpenDNS where he works on a team of specialized data scientists and security experts creating actionable defensive technologies. With a strong background in networks architectures and communication protocols, Anthony researches online threats, analyzes malware, and hacks on Bro IDS. He has presented at past conferences including Shmoocon, Baythreat, Thotcon, and Bro4Pros.