Unsupervised Detection and Clustering of Malicious TLS Flows

Gibran Gomez, Platon Kotzias, Matteo Dell'Amico +2

Malware abuses TLS to encrypt its malicious traffic, preventing examination by content signatures and deep packet inspection. Network detection of malicious TLS flows is an importa…