This work fills a gap that exists in current Command and Control server environments that isn’t being addressed. We have observed that security professionals have a difficult decision: either employ simple open-source tools that are immediately flagged or try to access advanced proprietary solutions that no one understands. We are trying to resolve this issue by designing a secure and functional Command and Control server, implementing cryptographic measures to protect data in transit, along with DNS over HTTPS and ensuring seamless proxy integration for uninterrupted communication between the client, server, and proxy. This will improve security awareness and help organizations develop better protection strategies against such threats in today’s increasingly vulnerable digital environment. Evaluation of the working of commands and powershell scripts to check for functionality and performing network analysis tools to measure security and performance and movement of obfuscated traffic is also carried out as a part of testing.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Advanced Command and Control Framework for Covert Operations

  • Ashwin Anand,
  • S. Dyanesh,
  • P. Jivan Prasad,
  • Karaka Nitin,
  • Manbendra Satpathy,
  • P. P. Amritha

摘要

This work fills a gap that exists in current Command and Control server environments that isn’t being addressed. We have observed that security professionals have a difficult decision: either employ simple open-source tools that are immediately flagged or try to access advanced proprietary solutions that no one understands. We are trying to resolve this issue by designing a secure and functional Command and Control server, implementing cryptographic measures to protect data in transit, along with DNS over HTTPS and ensuring seamless proxy integration for uninterrupted communication between the client, server, and proxy. This will improve security awareness and help organizations develop better protection strategies against such threats in today’s increasingly vulnerable digital environment. Evaluation of the working of commands and powershell scripts to check for functionality and performing network analysis tools to measure security and performance and movement of obfuscated traffic is also carried out as a part of testing.