Comment by hedgehog

Are you aware of Dave Dittrich's work at University of Washington? He wrote a nice overview on secured P2P C&C networks in Storm and Nugache that you might find interesting:

http://staff.washington.edu/dittrich/writing.html