malicious code injection

Analysis of Covert C2 Channels via HTTP/HTTPS: Traffic Encryption Patterns, Anomaly Detection, and Defense Strategies

by
Analysis of Covert C2 Channels via HTTP/HTTPS: Traffic Encryption Patterns, Anomaly Detection, and Defense Strategies

Malicious code typically relies on C2 (Command and Control) channels to communicate with attackers, receiving instructions and leaking data. Analyzing the traffic characteristics of C2 channels aids in the detection and defense against malicious code. C2 Channel Traffic Characteristics 1. Communication Patterns： • Periodic Heartbeats：Malicious code may periodically send heartbeat packets to the C2 server … Read more

Rapid Response to Malicious Code Injection Threats in Industrial Control Systems Using WebGaze Tools

by
Rapid Response to Malicious Code Injection Threats in Industrial Control Systems Using WebGaze Tools

One day, the cybersecurity monitoring center of an oil and gas company received a series of alarm signals indicating abnormal behavior in some of its production control systems. After a thorough investigation, it was discovered that certain critical control nodes were receiving abnormal commands from the internal network, suspected to be an external attacker attempting … Read more