Abstract: A system and method are described for information extraction from network traffic traces that are both encrypted and non-encrypted. The system includes a client computer and a remote computer, where the client computer communicates data over a network. The client computer sets a session key log file environment variable, such that when the client computer launches a supported browser, a session key log file (KLF) is created, computer network traffic traces are captured by retrieving data from encrypted traffic, and the KLF and captured traffic are periodically transferred to a remote server. A remote computer performs traffic mining to analyze the captured traffic traces and extract sensitive pieces of information.

Abstract: A system and method are described for information extraction from network traffic traces that are both encrypted and non-encrypted. The system includes a client computer and a remote computer, where the client computer communicates data over a network. The client computer sets a session key log file environment variable, such that when the client computer launches a supported browser, a session key log file (KLF) is created, computer network traffic traces are captured by retrieving data from encrypted traffic, and the KLF and captured traffic are periodically transferred to a remote server. A remote computer performs traffic mining to analyze the captured traffic traces and extract sensitive pieces of information.

Abstract: A system and method are described for information extraction from network traffic traces that are both encrypted and non-encrypted. The system includes a client computer and a remote computer, where the client computer communicates data over a network. The client computer sets a session key log file environment variable, such that when the client computer launches a supported browser, a session key log file (KLF) is created, computer network traffic traces are captured by retrieving data from encrypted traffic, and the KLF and captured traffic are periodically transferred to a remote server. A remote computer performs traffic mining to analyze the captured traffic traces and extract sensitive pieces of information.

Abstract: Aspects of the disclosure provide a method for encrypting data. The method includes generating a sequence of states of a pseudo-random number generator (PRNG), generating a key stream including a sequence of key sections based on the sequence of states, and encrypting or decrypting data with the key stream. An initial state of the PRNG is generated based on a seed and a key, and each of other states in the sequence of states of the PRNG is generated based on a previous state of the PRNG and the key. The method eliminates the vulnerability to known-plaintext attack, and improves the security of communications between computer systems. Also, the method showed a performance improvement when compared to the Advanced Encryption Standard (AES) in cipher block chaining (CBC) mode. Moreover, the size of the encrypted data is almost the same as that of the original data.