forgery attack

plaintext-only attack

ciphertext-only attack

meet-in-the-middle attack

ClientStart, ClientKeyExchange, cipher-suites it supports, and suggested compression methods

ClientStart, TLS versions it supports, cipher-suites it supports, and suggested compression methods

ClientHello, TLS versions it supports, cipher-suites it supports, and suggested compression methods

ClientHello, ClientKeyExchange, cipher-suites it supports, and suggested compression methods

IDS

proxy

NetFlow

sys

IIS data

NetFlow data

network discovery event

IPS event data

The RST flag confirms the beginning of the TCP connection, and the ACK flag responds when the data for the payload is complete

The ACK flag confirms the beginning of the TCP connection, and the RST flag responds when the data for the payload is complete

The RST flag confirms the receipt of the prior segment, and the ACK flag allows for the spontaneous termination of a connection

The ACK flag confirms the receipt of the prior segment, and the RST flag allows for the spontaneous termination of a connection

proxy

NetFlow

IDS

sys

NetFlow collects metadata and traffic mirroring clones data.

Traffic mirroring impacts switch performance and NetFlow does not.

Traffic mirroring costs less to operate than NetFlow.

NetFlow generates more data than traffic mirroring.

SSL interception

packet header size

signature detection time

encryption

port scanning

man-in-the-middle

command injection

denial of service

transaction data

location data

statistical data

alert data