System and method for passively identifying encrypted and interactive network sessions

摘要: The system and method for passively identifying encrypted interactive network sessions described herein may distribute a passive vulnerability scanner in network, wherein the observe traffic travelling across reconstruct session from observed traffic. then analyze reconstructed to determine whether was or (e.g., based on randomization, packet timing characteristics, other qualities measured session). Thus, monitor real-time detect any devices that run services otherwise participate sessions, detecting be used manage changes potential vulnerabilities network.