Mitigation of the effect of Standard Networks Attacks in SSL Encrypted Traffic by Encrypted Traffic Analysis
Muhammad Hamad, Muhammad Hanif Durad, Muhammad Yousaf · VFAST Transactions on Mathematics · 2020
With increased use of encryption, cyber threat landscape is changing. For general public this transition shifts to more private and safer internet experiences, but at the same time it is a serious concern for security personnel now. For them it hinders control over the traffic moving on their network and poses difficulty in traffic analysis and management. Security personals are interested in knowing how the network is being accessed, whether or not that traffic contains some malware and is safe enough and compliant with your organization’s policies. This project is not about decrypting the encrypted content of the packet’s payload as it will highly degrade network performance plus some advanced encryption algorithms like AES are assumed to be perfect. So the aim of this project is to analyze encrypted traffic and find out some interesting patterns without the need for bulk decryption. The analysis will be based on flow based features and metadata. Encrypted Traffic Analytics maintains the integrity of the encrypted flow and doesn’t affect the privacy of users.