Design and implementation of multi-channel 10G network security device
Chen Chundi，Gong Zhonghui
School of Modern Information Industry, Guangzhou College of Commerce
Abstract： This paper presented the design and implementation of a command and control (C2) channel management tool tailored to meet the functional requirements of covert communication, post-exploitation attacks, and red team operations in network attack and defense scenarios. Leveraging gRPC framework, Protobuf mechanism, and TLS protocol, we developed an integrated system encompassing server, management, and implantation terminals. Through the evaluation and analysis of data exchange, security, and concealment of the tool, it is proved that the tool is not only stability and reliability but also could improve the effectiveness of network attack and defense drills and the capability to defend against network threats, so that it is potential for further application and promotion.
Key words : network attack and defense; command and control; gRPC framework; Protobuf mechanism; TLS protocol; Go language
在眾多網絡安全技術中，命令與控制（Command and Control，C2）系統(tǒng)具有舉足輕重的地位。它作為攻擊者維持與受控主機通信、下達命令和接收信息的核心，不僅是網絡攻擊活動中的關鍵環(huán)節(jié)，也是網絡防御工作中必須高度重視的對象［1］。因此，為網絡安全專家和紅隊操作人員設計并實現(xiàn)高效、可靠的C2通道管理工具，對于發(fā)現(xiàn)和修復潛在的安全漏洞、提高遠程管理和監(jiān)控能力具有重要意義。
