3 ms·
I had a project I did for university a few years back, and we'd identify the browser or application just by looking at the timing information between packets (w
by arnon 9y ago
I had a project I did for university a few years back, and we'd identify the browser or application just by looking at the timing information between packets (without looking at ports, source/destination, etc.).
We could identify malware with around 85% accuracy, which was pretty good without any other marker.
- ArchReaper 9y agoThat sounds really interesting, do you have any publicly available documentation or articles about it?
- unexistance 9y agofound it http://arnon.dk/malicious-traffic-detection-using-traffic-fingerprints/ http://arnon.dk/malicious-traffic-detection-using-traffic-fi...