Disclosed is a method of identifying malicious network traffic communicated via a computer network. The method starts by evaluating a measure of a correlation fractal dimension for a portion of network traffic over a monitored network connection. Then the measure of correlation fractal dimension is compared with a reference measure of correlation fractal dimension for a corresponding portion of network traffic of a malicious network connection so as to determine if malicious network traffic is communicated over the monitored network connection. Also disclosed is a method of identifying malicious network traffic based on a definition of network traffic based on the protocol of a new network connection.
Malicious network traffic identification
10.02.2016
Patent
Elektronische Ressource
Englisch
A Method for TLS Malicious Traffic Identification Based on Machine Learning
Trans Tech Publications | 2021
|MALICIOUS TRAFFIC DETECTION WITH ANOMALY DETECTION MODELING
Europäisches Patentamt | 2022
|MALICIOUS TRAFFIC DETECTION WITH ANOMALY DETECTION MODELING
Europäisches Patentamt | 2022
|