Context-based Encrypted Traffic Analysis Using Flow Data (ETA)

The goal of the project is to design a new system for threat detection using contextual NetFlow analysis. This analysis is based on revealing the relationships between individual network traffic records without the need to decrypt the traffic to improve the analysis capabilities compared to the classical approach, which is based on the analysis of only individual records in isolation. With the new type of analysis, it is possible to identify threats that are currently hidden due to encryption and, at the same time, provide network administrators additional information to create an overall picture of the state of the network, services, or applications used.

This project is co-financed from the state budget by the Technology Agency of the Czech Republic and Ministry of Industry and Trade of the Czech Republic under the TREND Programme.

January 2021 - December 2023
FW03010099