(There are two conditions for a botnet. First, the botnet client must be able to perform the operations specified by the hacker without the hacker logging in to the operating system; secondly, the botnet client must be able to cooperate to implement a certain solution. , and this collaboration requires only minimal or even zero participation of hackers. Computer mobilization that satisfies the above two conditions becomes a botnet. A typical botnet usually consists of a bot server and multiple bot clients. The controller of the botnet is called the brotherder (herder means shepherd) to communicate between the Bot server and the client through a remote command and control server (CCserver) using the IRC channel.
The evolution and protection of botnets.pdf)