Microsoft to distribute botnet intelligence to governments, industry
Microsoft is testing a new service to distribute threat data captured from botnets and other sources to governments, law enforcement, computer emergency response teams, and companies.
Microsoft representatives told the International Conference on Cyber Security being held this week in New York that the company plans to provide intelligence feeds using the data it collects from captured botnets, such as Kelihos and Rustock, to government and industry partners, according to a report by Kaspersky Lab’s Threat Post.
The Redmond, Wash., firm has been beta testing the system internally in recent months. The system is a 70-node cluster running the Apache Hadoop framework on top of a Windows server, the report said. The data includes IP addresses of Kelihos infected systems complemented by other data such as autonomous system numbers and reputation data provided by Microsoft's smart data network services.
