In addition to leaving customers unsatisfied with their ability to respond to attacks, and potentially driving ISPs with minimal support budgets out of business, asking the service providers to become the de facto police for stopping botnet activity is impractical for a number of reasons, McPherson said.

"You tend to see a lot of people, not just law enforcement, calling for quarantines of suspected botnet infected IP addresses, but you can't just start blocking legitimate users who may not know they are involved, what if you stop someone from making a VoIP-based emergency services call?" McPherson questioned. "If someone gets blocked by their ISP, they're going to move to another provider; systems and solutions to automate the security defenses needed to address this problem are being developed, but it will take time, and most infrastructure out there won't natively support that sort of work today."

McPherson said that it is encouraging to see cooperation between U.S. law enforcement officials and foreign nations, but he believes that the botnet issue will remain a major problem nonetheless.

"It's good to see that there is more global information sharing going on, and that local governments are taking responsibility for cleaning up their own backyards, but with millions of bot hosts and more than 90 percent of those outside the U.S., I think they're still only putting a tiny dent in the problem at his point," said McPherson.

Other security industry experts agreed that it will take a lot more effort on the part of the international law enforcement community to have any noticeable impact on botnets and other cyber-criminals.

However, efforts such as Bot Roast will succeed in forcing botnet operators to increasingly worry that they may indeed be brought to justice for the crimes they commit, said Alan Paller, director of research for IT security training provider SANS Institute.

"At his point, the law enforcement community still can't get much done because so many of the perpetrators are located in so many places where there are no cooperative agreements," he said. "But what they are doing is increasing the risk and raising the cost of committing the crimes, which is just what law enforcement is good at; in the end they can't ever really stop people from trying to rob banks, but they can make it really dangerous and costly, just as they always have tried to."