English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Protocol detection is the process of determining the application layerprotocol in the context of network security monitoring, which requires a timelyand precise decision to enable protocol-specific deep packet inspection. Thistask has proven to be complex, as isolated characteristics like port numbersare not sufficient to reliably determine the application layer protocol. Hence,more dynamic detection approaches have been developed. In this paper, weanalyze the Dynamic Protocol Detection mechanisms employed by popular andwidespread open-source network monitoring tools. We show on the example of HTTPthat all analyzed detection mechanisms are vulnerable to evasion attacks, whichpose a serious threat to real-world monitoring operations. We find that theunderlying fundamental problem of protocol disambiguation is not adequatelyaddressed in two of three monitoring systems that we analyzed. To enableadequate operational decisions, this paper highlights the inherent trade-offswithin Dynamic Protocol Detection.

Attacks on Dynamic Protocol Detection of Open Source Network Security Monitoring Tools