Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Advanced Persistent Threat (APT) imposes increasing threats on cyber security with the developing network attack technologies. APT is a highly interactive, specifically targeted and extremely harmful network-centric attack, which employs various technologies to evade detection during attacks leading to the result that victims will not be aware of attacks until they suffer from tremendous losses. Since command and control (C&C) is an essential component during the lifetime of APT, the detection of it is a practical measure to defend against the APT. ,  analyze the features of C&C in APT and find that the HTTP-based C&C is widely used. Based on the analysis results,  propose a new feature of C&C, i.e., independent access, to characterize the difference beten C&C communications and normal HTTP requests. Applying the independent access feature into DNS records,  implement a novel C&C detection method and validate it on public dataset. As a new feature of C&C, its advantages and drawbacks are also analyzed.
['Xu Wang', 'Kangfeng Zheng', 'Xinxin Niu', 'Bin Wu', 'Chunhua Wu']
I am writing a research paper on a idea Detection of command and control in advanced persistent threat based on independent access
[{"from": "human", "value": "I am writing a research paper on a idea Detection of command and control in advanced persistent threat based on independent access"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Advanced Persistent Threat (APT) imposes increasing threats on cyber security with the developing network attack technologies. APT is a highly interactive, specifically targeted and extremely harmful network-centric attack, which employs various technologies to evade detection during attacks leading to the result that victims will not be aware of attacks until they suffer from tremendous losses. Since command and control (C&C) is an essential component during the lifetime of APT, the detection of it is a practical measure to defend against the APT. ,  analyze the features of C&C in APT and find that the HTTP-based C&C is widely used. Based on the analysis results,  propose a new feature of C&C, i.e., independent access, to characterize the difference beten C&C communications and normal HTTP requests. Applying the independent access feature into DNS records,  implement a novel C&C detection method and validate it on public dataset. As a new feature of C&C, its advantages and drawbacks are also analyzed."}]