RESEARCH ON LIVING OFF THE LAND ATTACKS AND DEVELOPMENT OF DETECTION METHODOLOGY

Rogov Maxim Alekseevich

The article is dedicated to the study of Living Off the Land attacks, which are increasingly being used by malicious actors for covert movement within internal networks. Special attention is given to the development of a methodology for their detection. Purpose of the work: The study aims to investigate the structure and characteristics of Living Off the Land (LOTL) attacks in corporate IT environments to identify patterns that can definitively detect such attacks and develop recommendations for protection against them. Research Method: A systematic analysis of open sources on the use of publicly available information security practices to implement methods for protecting information systems from Living Off the Land attacks. Results: The study explores Living Off the Land attacks and formulates a methodology for detecting them in computer systems and networks based on log analysis. Scientific novelty: Information protection methods are systematized with regard to the use of technologies embedded in operating systems, specifically concerning information security. Threats posed by Living Off the Land attacks are classified, and methods for protection against such attacks are developed.

Keywords:information security, data protection, antivirus evasion techniques, information security threats, cybersecurity