This research adopts a quantitative approach that involves surveys to obtain more information on the current penetration testing processes and the problems encountered by organizations in general. The proposed system’s development is based on this significant data, most of which focuses on usability, robust encryption, and data encoding while remaining flexible to meet various organizations’ needs. The research shows that secure client–server communication and initial penetration are critical, as these two factors determine the security position of organizations. Preliminary research suggests the C2 system under development can enhance productivity and strengthen data security. This paper is also in line with SDG 9-industry, innovation, and infrastructure, which is aimed at developing resilient infrastructure within organizations and enhancing their data management capacities effectively and safely. As such, the system will be useful for security professionals trying to understand and test the working principles of various methods of remote management, system administration as well as incident response. Concisely, the ZeroTrace technology, which is grounded in user-focused research and design, is a demonstration of the company’s willingness to solve the digital security issues that organizations face in the current era.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

ZeroTrace—A Tailored Command-and-Control (C2) Server for Penetration Testing

  • Justin Kombe Tonguino,
  • Nor Azlina Abd Rahman,
  • Maen T. Al-Rashdan

摘要

This research adopts a quantitative approach that involves surveys to obtain more information on the current penetration testing processes and the problems encountered by organizations in general. The proposed system’s development is based on this significant data, most of which focuses on usability, robust encryption, and data encoding while remaining flexible to meet various organizations’ needs. The research shows that secure client–server communication and initial penetration are critical, as these two factors determine the security position of organizations. Preliminary research suggests the C2 system under development can enhance productivity and strengthen data security. This paper is also in line with SDG 9-industry, innovation, and infrastructure, which is aimed at developing resilient infrastructure within organizations and enhancing their data management capacities effectively and safely. As such, the system will be useful for security professionals trying to understand and test the working principles of various methods of remote management, system administration as well as incident response. Concisely, the ZeroTrace technology, which is grounded in user-focused research and design, is a demonstration of the company’s willingness to solve the digital security issues that organizations face in the current era.