BlindBox Deep Packet Inspection over Encrypted Traffic Justine Sherry Chang Lan UC Berkeley UC Berkeley ABSTRACT Many network middleboxes perform deep packet inspection DPD a set of useful tasks which examine packet payloads These tasks include intrusion detection IDS exfiltration detection and parental filtering However a long standing issue is that once packets are sent over HTTPS middleboxes can no longer accomplish their tasks because the payloads are encrypte
BlindBox Deep Packet Inspection over Encrypted Traffic Justine Sherry Chang Lan UC Berkeley UC Berkeley ABSTRACT Many network middleboxes perform deep packet inspection DPD a set of useful tasks which examine packet payloads These tasks include intrusion detection IDS exfiltration detection and parental filtering However a long standing issue is that once packets are sent over HTTPS middleboxes can no longer accomplish their tasks because the payloads are encrypte