Showing cs.CRShow all
2 papers · 1 filter
cs.CR2025
Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels
Clément Parssegny, Johan Mazel, Olivier Levillain +1
Off-the-shelf software for Command and Control is often used by attackers and legitimate pentesters looking for discretion. Among other functionalities, these tools facilitate the…
cs.CR2025
Overlapping data in network protocols: bridging OS and NIDS reassembly gap
Lucas Aubard, Johan Mazel, Gilles Guette +1
IPv4, IPv6, and TCP have a common mechanism allowing one to split an original data packet into several chunks. Such chunked packets may have overlapping data portions and, OS netwo…