Discovering Command and Control (C2) Channels on Tor and Public Networks Using Reinforcement Learning

arXiv:2402.09200v1 Announce Type: new
Abstract: Command and control (C2) channels are an essential component of many types of cyber attacks, as they enable attackers to remotely control their malware-infected machines and execute harmful actions, such as propagating malicious code across networks, exfiltrating confidential data, or initiating distributed denial of service (DDoS) attacks. Identifying these C2 channels is therefore crucial in helping to mitigate and prevent cyber attacks. However, identifying C2 channels typically involves a manual process, requiring deep knowledge and …

actions arxiv attackers attacks code command command and control confidential control cs.ai cs.cr cyber cyber attacks data enable machines malicious malware networks public tor types