Check out the new USENIX Web site.


HotBots '07 Home

Important Dates

Workshop Organizers


Workshop Format

Instructions for Authors

Submission Instructions

Web Submission Form

Call for Papers
in PDF Format

HotBots '07 Call for Papers

First Workshop on Hot Topics in Understanding Botnets (HotBots '07)
April 10, 2007
Cambridge, MA, USA

Sponsored by USENIX, The Advanced Computing Systems Association

Co-located with the 4th USENIX Symposium on Networked Systems Design & Implementation (NSDI '07), which will take place April 11–13, 2007

Important Dates
Submissions due: March 1, 2007, 11:59 p.m. PST  Deadline Extended!
Notification of acceptance: March 19, 2007
Final papers due: April 2, 2007

Workshop Organizers

Program Chair
Niels Provos, Google Inc.

Program Committee
Michael Bailey, University of Michigan
Paul Barford, University of Wisconsin
David Dagon, Georgia Institute of Technology
Thorsten Holz, University of Mannheim
Fabian Monrose, Johns Hopkins University
Vern Paxson, International Computer Science Institute

Preliminary research or experience papers are solicited for the First Workshop on Hot Topics in Understanding Botnets (HotBots '07).

HotBots is intended as a forum for lively discussion of innovative ideas, recent progress, or practical experience in understanding all aspects of botnets. Intriguing preliminary results and thought-provoking ideas will be strongly favored. Papers will be selected for their potential to stimulate discussion in the workshop.

HotBots '07 will be a one-day event, Tuesday, April 10, 2007, co-located with the 4th USENIX Symposium on Networked Systems Design & Implementation (NSDI '07) in Cambridge, MA.

Workshop Format
To ensure a productive workshop environment, attendance will be by invitation and/or acceptance of paper submission.

Each author will have 15 minutes to present his or her idea, followed by 15 minutes of discussion with the workshop participants.

Instructions for Authors
The goal of the workshop is to stimulate discussion and to improve the understanding of botnets.

Possible topics of interest include but are not limited to:

  • Architecture: Types of botnet topologies, Command&Control, infection vectors, resource sharing across bots and networks, stealthy botnets.
  • Detection: Passive or active approaches to detecting participating hosts, C&C communication or botnet activities.
  • Measurements: Numbers of botnets and bots, trends over time, geographic distribution, time of life and attrition, identification of parties behind botnet activity.
  • Case studies: Experiences with particular botnet cases.
  • Mitigation: How to protect against botnets and DDoS, spam, identify theft, etc., originating from them.
  • Motivation: Economic value of botnets, purpose and use of botnets, targeted or special-interest botnets.
  • Legal: What forms of mitigation are permissible, what the policy and legal problems in honeynet operation are, interactions with botnet participants, data collection, and traceback. Policy analysis should be focused toward the practical implementation of botnet monitoring and response systems.
While our goal is to solicit ideas that are not completely worked out, we expect submissions to be supported by some evidence of feasibility or preliminary quantitative results.

Submitted papers must be no longer than eight (8) single-spaced 8.5" x 11" pages, including figures, tables, and references. Author names and affiliations should appear on the title page.

Submissions must be in PDF format and must be submitted via this Web submission form.

Simultaneous submission of the same work to multiple venues, submission of previously published work, and plagiarism constitute dishonesty or fraud. USENIX, like other scientific and technical conferences and journals, prohibits these practices and may, on the recommendation of a program chair, take action against authors who have committed them. In some cases, program committees may share information about submitted papers with other conference chairs and journal editors to ensure the integrity of papers under consideration. If a violation of these principles is found, sanctions may include, but are not limited to, barring the authors from submitting to or participating in USENIX conferences for a set period, contacting the authors' institutions, and publicizing the details of the case.

Note, however, that we expect that many papers accepted for HotBots '07 will eventually be extended as full papers suitable for presentation at future conferences.

Authors uncertain whether their submission meets USENIX's guidelines should contact the Program Chair,, or the USENIX office,

?Need help?

Last changed: 23 Feb. 2007 ch

HotBots '07 Index