Cisco launched a technology to identify malicious code on encrypted traffic

Cisco has released Encrypted Traffic Analytics (ETA), a breakthrough technology that detects malware on encrypted network traffic without interfering with or decrypting data.

This solution was tested on a number of customers selected by Cisco since June 2017. They now say they will expand ETA support from Campus switch products to office routers (such as ISR and ASR). and virtual cloud service routers (like CSR).

ETA uses machine learning to analyze HTTPS traffic

Cisco said the new ETA technology uses a multi-disciplinary machine learning system to read encrypted data, identifying the smallest differences between the initial traffic and the contaminated traffic. Cisco said:

"First, the ETA checks the initial data of the connection, which itself may contain important data about the rest of the content. Then a series of information about the length, duration of the package, brought to clues to traffic content The detection process based on this network traffic is supported by machine learning so it can be changed to stay effective. "

Cisco also stated that the main benefit of ETA is to preserve privacy without trade-off with security or breaking the protocols that many companies use.

Customers need the latest Cisco products

'ETA was originally only on campus switches, Catalyst 9300 and 9400, now extended to both WAN and cloud,' said Scott Harrell, Cisco's Vice President and Director of Enterprise Networking Business.

The following products will receive ETA support in addition to OS IOS XE.

Integrated Services Router (ISR): 4000 Series, 1000 Series, ISRv are ENCS 5000 series
Aggregation Services Router (ASR) 1000 series
Cloud Services Router (CSR) 1000V

A report from Phish Labs last month said that every four phishing sites have one page running through HTTPS. Gartner predicts that by 2019, 80% of Internet traffic will be encrypted and about 50% of malware campaigns will switch to using encryption technology.

See more: