Detecting Encrypted Malware Traffic (Without Decryption)

Security Detecting Encrypted Malware Traffic (Without Decryption)7 min read Blake Anderson Introduction Over the past 2 years, we have been systematically collecting and analyzing malware-generated packet captures. During this time, we have observed a steady increase in the percentage of malware samples using TLS-based encryption to evade detection. In August 2015, 2.21% of the malware samples use

[teddy-g]

暗号化通信からマルウェアを見つけ出す手法について。 github/joy含め参考資料必見。