Detecting Encrypted Malware Traffic (Without Decryption)Security Detecting Encrypted Malware Traffic (Without Decryption)7 min read Blake Anderson Introduction Over the past 2 years, we have been systematically collecting and analyzing malware-generated packet captures. During this time, we have observed a steady increase in the percentage of malware samples using TLS-based encryption to evade detection. In August 2015, 2.21% of the malware samples use
