The adoption of network traffic encryption is continually growing. Popular applications use
encryption protocols to secure communications and protect the privacy of users. In addition …

The growing size and complexity of today's computer network make it hard to achieve and
maintain so-called cyber situational awareness, ie, the ability to perceive and comprehend …

Fingerprinting a host's operating system is a very common yet precarious task in network,
asset, and vulnerability management. Estimating the operating system via network traffic …

As the mainstream encrypted protocols adopt TCP protocol to ensure lossless data
transmissions, the privacy of encrypted TCP traffic becomes a significant focus for …

Effective triage is of utmost importance for cybersecurity incident response, namely in
handling ransomware or similar incidents in which the attacker may use self-propagating …

Internet Service Providers (ISPs) bear the brunt of being the first port of call for poor video
streaming experience. ISPs can benefit from knowing the user's device type (eg, Android …

We describe a tracking technique for Linux devices, exploiting a new TCP source port
generation mechanism recently introduced to the Linux kernel. This mechanism is based on …

Abstract Software-Defined Networking (SDN) is becoming a native networking model for
next generation networks. However, with its decoupled architecture, SDN is susceptible to …

Over the last few years, the adoption of encryption in network traffic has been constantly
increasing. The percentage of encrypted communications worldwide is estimated to exceed …

In this paper, we describe a system for the continuous collection of data for the needs of
network security management. When a cybersecurity incident occurs in the network, the …