Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add an heuristic to detect fully encrypted flows #2058

Merged
merged 1 commit into from
Jul 26, 2023

Commits on Jul 24, 2023

  1. Add an heuristic to detect fully encrypted flows

    A fully encrypted session is a flow where every bytes of the
    payload is encrypted in an attempt to “look like nothing”.
    The heuristic needs only the very first packet of the flow.
    See: https://www.usenix.org/system/files/sec23fall-prepub-234-wu-mingshi.pdf
    
    A basic, but generic, inplementation of the popcpunt alg has been added
    IvanNardi committed Jul 24, 2023
    Configuration menu
    Copy the full SHA
    df8c9e9 View commit details
    Browse the repository at this point in the history