Disclosed is a method of identifying malicious network traffic communicated via a computer network. The method starts by evaluating a measure of a correlation fractal dimension for a portion of network traffic over a monitored network connection. Then the measure of correlation fractal dimension is compared with a reference measure of correlation fractal dimension for a corresponding portion of network traffic of a malicious network connection so as to determine if malicious network traffic is communicated over the monitored network connection. Also disclosed is a method of identifying malicious network traffic based on a definition of network traffic based on the protocol of a new network connection.
Malicious network traffic identification
2016-02-10
Patent
Electronic Resource
English
A Method for TLS Malicious Traffic Identification Based on Machine Learning
Trans Tech Publications | 2021
|MALICIOUS TRAFFIC DETECTION WITH ANOMALY DETECTION MODELING
European Patent Office | 2022
|MALICIOUS TRAFFIC DETECTION WITH ANOMALY DETECTION MODELING
European Patent Office | 2022
|