基于Cobalt Strike和Office漏洞的入侵者反制研究

Research on intruder intrusion based on cobalt strike and office vulnerabilities

当今时代,虚拟的计算机网络空间已被视为一个主权国家极其重要的"第五空间"。网络安全的问题也与人们的生活更加密切。然而,传统的安全防御机制始终处于被动式的防御机制,不能对入侵者进行及时地制裁。通过入侵者反制研究,可以将被动式的防御变为主动的防御,更大限度地保障网络安全,并为攻击过后的溯源调查增加更多的依据。

At present,cyberspace has been regarded as the"fifth space"after land,sea,air and sky".People also pay more and more attention to the problem of network security.However,the traditional securitydefense mechanism is always in the passive defense mechanism,and can not punish the intruder in time.Through the research of intruder,we can change the passive defense into active defense,and guarantee the network security to a greater extent.And add more evidence to the investigation after the attac.