Security Think Tank: Severing C&C comms is key, but complex