Research on Covert Construction of C2 Infrastructure and Beacon Bypass Defense Mechanism Based on APT Attack

This research focuses on the dynamic covert construction of C2 infrastructure and beacon defense bypass technology in APT attacks. By analyzing the new architectures of apt and C2 in recent years, this paper proposes the “cloud native dynamic adaptation” C2 architecture, hybrid DGA algorithm, legal service simulation and decentralized design, and proposes three effective mechanisms for beacon bypass defense. Experiments show that the architecture achieves 92.3 % of the communication escape rate against Suricata 7.0.10+elastic security system, and improves the false alarm rate of sandbox detection by 47 % through the “traffic mimicry confusion” technology. This study provides a new detection perspective for the defense of network security attacks.