The German Honeynet Project just released a paper on the usage of honeynets to explore botnets: Know your enemy: Tracking Botnets. Besides the description of the use of honeynets to do the tracking, the paper also does a great job in providing insights to the “why” and “how” background information of botnets.

Interestingly a lot of the more successful bots (Angobot, SDBot, DSNX) adopted the GPL as development model. I wonder if they have sourceforge.net project pages?