References
References
Scientific papers, standards, algorithms and tools that inform ExfilGuardian's design
Purpose
This section collects the academic and technical foundations behind ExfilGuardian: the algorithms powering each detection layer, the protocol standards the parsers implement, the open-source tools that pioneered the techniques we build on, and the research papers that shaped our understanding of network exfiltration.
These references serve two purposes: documenting why design decisions were made, and providing a reading list for contributors who want to go deeper on any detection layer.
Sections
- Algorithms: Detection algorithms for each layer (entropy, anomaly detection, correlation, JA3)
- Standards & RFCs: Protocol specifications implemented in the parsers
- Tools & Prior Art: Open-source tools and academic papers on exfiltration detection