DECinENT: a method to detect email crack in encrypted network traffic

Recently, along with the rapid development of the Internet and cloud computing, more and more network application protocols use encryption technology in order to protect users’ privacy. The detection of email high-risk operations such as cracking in encrypted traffic becomes a challenge. This paper proposes a DECinENT: a method to detect email crack in encrypted network traffic. The main idea is identifying mail behavior feature and detecting crack behavior by abnormal detection algorithm in the encrypted traffic. The DECinENT was used to test in experiment and compared with traditional methods. The results show that the efficiency has been greatly improved.