MBTree: Detecting Encryption RAT Communication Using Malicious Behavior Tree

Cong Dong, Zhigang Lu, Zelin Cui +2

Network trace signature matching is one reliable approach to detect active Remote Control Trojan, (RAT). Compared to statistical-based detection of malicious network traces in the…