Fingerprinting the Shadows: Unmasking Malicious Servers with Machine Learning-Powered TLS Analysis
Andreas Theofanous, Eva Papadogiannaki, Alexander Shevtsov, Sotiris Ioannidis · 2024
Over the last few years, the adoption of encryption in network traffic has been constantly increasing. The percentage of encrypted communications worldwide is estimated to exceed 90%. Although network encryption protocols mainly aim to secure and protect users' online activities and communications, they have been exploited by malicious entities that hide their presence in the network. It was estimated that in 2022, more than 85% of the malware used encrypted communication channels.