Can I read C2 Traffic Detection on EtoBox?

C2 Traffic Detection by meryem.belmirr is a document available to read on EtoBox.

What is C2 Traffic Detection about?

The document discusses the development of lightweight machine learning models to detect encrypted Command-and-Control (C2) traffic, specifically focusing on Havoc traffic. It outlines the creation of synthetic datasets, feature extraction, and the evaluation of various ML models, highlighting the importance of timing and packet size features for detection. The findings indicate that while XGBoost performed best, generalization to other C2 frameworks remains a challenge, emphasizing the need for diverse trai

Author

meryem.belmirr

Language

EN