Automated and Scalable QoS Control for Network Convergence

Brent Hoon (Brent ByungHoon Kang, UNC at Charlotte) said that although Conficker had been contained (by buying up the domain names to be used in C&C) in 2009, Conficker has never disappeared. They are still seeing hits, and there appear to be about six million IP addresses that show signs of infection. Stefan Savage wondered how you could economically get patches to six million people. Someone else asked how Conficker was contained, and Hoon said that Microsoft had bought up 10,000 domain names, enough for three years. Hoon also said that Waledac, another contained botnet, has been decreasing over time. Savage commented that we have a low threshold for success.