Abstract
 

Paper Title

Anti-bot Countermeasures in Japan: Cyber Clean Center Project Update

Author(s)

Takashi Manabe (Japan), JPCERT/CC.
Chris Horsley (Japan), JPCERT/CC

Time

11 December, Thursday, 14:45 - 15:15 .

 

 

In Japan as everywhere, a recent, significant threat facing Internet-connected systems is botnets. In December 2006, Japan's Ministry of Economy, Trade and Industry (METI) and Ministry of Internal Affairs and Communications (MIC) founded a joint project to combat this menace. Known as the Cyber Clean Center (CCC), this initiative aims to both disinfect hosts in Japan infected with botnet software and provide advice on how to avoid further re infection.

With the co-operation of approximately 70 Japanese ISPs, samples of botnet software are collected using honeypots. Using this information, users identified by the ISP as being infected are notified that they can download a free removal tool. At the same time, collected samples are catalogued and analysed to study their behaviour and submitted for inclusion in anti-virus software.

Within this project are three participating groups: the Bot Countermeasure System Operations Group, operated by Telecom-ISAC Japan; the Bot Infection Prevention Promotion Group, operated by IPA; and the Bot Program Analysis Group, operated by JPCERT/CC.

At AVAR2007, IPA introduced the overall concept of the CCC. This year's presentation will detail the progress of the CCC project to date, provide statistics and results of its operation, and outline future directions.