ENCRYPTED TRAFFIC OBFUSCATION METHOD AND SYSTEM

A system and methods to obfuscate encrypted data packets from traffic analysis attacks are disclosed. At a high level, a processing device: executes an application or protocol for receiving traffic associated with the application or protocol; selects an obfuscation interval duration for a next transmission of a data packet; determines, at the obfuscation interval duration, if a queue for transmission of a next data packet associated with the application or protocol is: i) empty, or ii) has a next data packet associated with an application or protocol; and transmits, based on the determination, at least one of: i) a length-adjusted next encrypted data packet, or ii) an encrypted obfuscation data packet. In The transmitted length-adjusted encrypted next data packet can be generated using the next data packet and is adjusted in length with an obfuscation payload prior to encryption and subsequent transmission.