3 papers
cs.NI2025
Overlapping IPv4, IPv6, and TCP data: exploring errors, test case context and multiple overlaps inside network stacks and NIDSes with PYROLYSE
Lucas Aubard, Johan Mazel, Gilles Guette +1
IP fragmentation and TCP segmentation allow for splitting large data packets into smaller ones, e.g., for transmission across network links of limited capacity. These mechanisms pe…
cs.CR2025
Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels
Clément Parssegny, Johan Mazel, Olivier Levillain +1
Off-the-shelf software for Command and Control is often used by attackers and legitimate pentesters looking for discretion. Among other functionalities, these tools facilitate the…
cs.CR2025
Overlapping data in network protocols: bridging OS and NIDS reassembly gap
Lucas Aubard, Johan Mazel, Gilles Guette +1
IPv4, IPv6, and TCP have a common mechanism allowing one to split an original data packet into several chunks. Such chunked packets may have overlapping data portions and, OS netwo…