Shake the Box: How to Get Encrypted Traffic Insights Without Decryption.

The most advanced security teams rely on network traffic as a fundamental data source, ground truth for security investigations, but encryption has made certain aspects of that truth increasingly difficult to obtain.

Decrypting the traffic would seem the obvious solution, but in many cases it’s not an optimal or even technically possible countermeasure. Decryption can be cost prohibitive at scale, violate privacy policies or laws, or unacceptably degrade network performance.

In cases where organisations can’t decrypt traffic due to cost, performance, privacy regulations or technical limitations, open-source Zeek is the best tool for deriving insight from encrypted traffic. While encryption obscures payloads it doesn’t obscure the endpoints or timing of a communication, or the fact that a conversation took place, or didn’t take place.

Download Now

Required fields*

Submit

Please agree to the conditions

By requesting this resource you agree to our terms of use. All data is protected by our Privacy Notice. If you have any further questions please email dataprotection@headleymedia.com.

Submit

Required fields*

First Name *

Last Name *

Job Title *

Company Name *

Address Line 1 *

City *

State/County *

Zip/Postal Code *

Country *

Phone *

Industry *

Company Size *

What are your Network Traffic Analysis Priorities? *

Give Responders Better Network Visibility to Resolve Incidents

Enable Network-Based Threat Hunting

Gain Visibility Into Threats in Encrypted Traffic

Other, please state:

Do You Use Network Data In Forensics? *

Submit

In order to provide you with this free service, we may share your business information with companies whose content you choose to view on this website.

All information that you supply is protected by our privacy policy and you agree to our Terms of Use.