Unsupervised Detection and Clustering of Malicious TLS Flows

Malware abuses TLS to encrypt its malicious traffic, preventing examination by content signatures and deep packet inspection. Network detection of malicious TLS flows is an important, but challenging, problem. Prior works have proposed supervised machine learning detectors using TLS features. Howeve...

Ausführliche Beschreibung

Bibliographische Detailangaben

Veröffentlicht in:	arXiv.org 2022-12
Hauptverfasser:	Gomez, Gibran, Kotzias, Platon, Dell'Amico, Matteo, Bilge, Leyla, Caballero, Juan
Format:	Artikel
Sprache:	eng
Schlagworte:	Clustering Computer Science - Cryptography and Security Detectors Inspection Machine learning Malware Sensors
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!