DEVICE DISCOVERY AND CLASSIFICATION FROM ENCRYPTED NETWORK TRAFFIC

Handshake protocol layer features are extracted from training data associated with encrypted network traffic of a plurality of classified devices. Record protocol layer features are extracted from the training data. One or more models are trained based on the extracted handshake protocol layer featu...

Full description

Saved in:
Bibliographic Details
Main Authors Valdez, Enriquillo, Pendarakis, Dimitrios, Molloy, Ian Michael, Cheng, Pau-Chen
Format Patent
LanguageEnglish
Published 09.07.2020
Subjects
CALCULATING
COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS
COMPUTING
COUNTING
PHYSICS
Online AccessGet full text

Cover

More Information
Summary:Handshake protocol layer features are extracted from training data associated with encrypted network traffic of a plurality of classified devices. Record protocol layer features are extracted from the training data. One or more models are trained based on the extracted handshake protocol layer features and the extracted record protocol layer features. The one or more models are applied to an observed encrypted network traffic stream associated with a device to determine a predicted device classification of the device.
Bibliography:Application Number: US201916243129