Spyware Master Hosts DB

[Konstantin Khrooschev <nathoo () rtsnet ru>]

hello all!
can anybody say something about idea of spyware owners network database
to use in network ids.
i mean of course not db of every infected computer on the net :-) but
database of "master" computer addresses, to which victims try to send
information.
i think, it may be something like dns based open relay db.

--
Konstantin Khrooschev
RTS Stock Exchange
Information Security Department


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------