AI Engineer - Learn how to integrate AI into software applications
Free courses from frontend to fullstack and AI
Overview
Syllabus
Introduction
Encryption Trend
TLS 1.3 Is Here
TLS 1.3 Highlights
TLS 1.3 Handshake
Why Network Detection?
North-South vs. East-West
X.509 Certificate
North-South Visibility: HTTPS (TLS 1.2) + DOH
Page-Load Fingerprints
TLS Fingerprinting Overview: JA3 and JA3S
TLS Fingerprinting: False Positives and Evasion
Traffic Analysis Overview
Cisco Encrypted Traffic Analysis
Network Detection: Better with Plaintext
Perfect Forward Secrecy Overview
PFS Adoption: 2013 - 2020
SSL/TLS Interception: "Break-and-Inspect"
SSL/TLS Interception: Secure Access Service Edge (SASE)
SSL/TLS Interception: Potential Weaknesses
SSL/TLS Interception: Trend
SSL/TLS Termination & Re-encryption
Out-of-band Analysis & Forensics PF5 breaks out-of-band network analysis and packet capture that needs to perform decryption for analysis
Out-of-band Analysis: TLS Downgrade
Out-of-band Analysis: Session Key Forwarding
Recommended Next Steps
Decrypting PFS at Fiserv
Apply / Next Steps
Taught by
RSA Conference