Get immersion-style cyber security training from industry experts in Philadelphia. Save $150 thru 2/26!


To attend this webcast, login to your SANS Account or create your Account.

8 Ways To Watch The Invisible: Analyzing Encrypted Network Traffic

  • Wednesday, November 9th, 2016 at 1:00 PM EST (18:00:00 UTC)
  • Johannes Ullrich
This webcast has been archived. You can view the webcast presentation and download the slides by logging into your SANS Portal Account or creating an Account. Click the Register Now button after you have logged in to view the Webcast.

You can now attend the webcast using your mobile device!


Mozilla recently observed over 50% of web traffic to Firefox users using SSL. With efforts like Lets Encrypt offering free and easy to deploy certificates, and increased user awareness regarding mass surveillance, the trend to encrypted traffic and dark networks will only increase. But this doesnt imply that one has to throw in the towel and stop watching network traffic. Even encrypted traffic still offers significant information that can be used to help secure your network. You will learn which information can be extracted from encrypted TLS traffic, how to intercept and in some cases decrypt TLS encrypted traffic and how to balance the security advantages of encryption with the need to inspect network traffic to limit data exfoliation threats.

Speaker Bio

Johannes Ullrich

Johannes Ullrich, dean of research at the SANS Technology Institute, is currently responsible for the SANS Internet Storm Center (ISC) and the GIAC Gold program. His research interests include IPv6, network traffic analysis and secure software development. In 2004, Network World named Johannes one of the 50 most powerful people in the networking industry, and SC Magazine named him one of the top five influential IT security thinkers for 2005. Prior to working for SANS, Johannes served as a lead support engineer for a web development company and as a research physicist.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.