Archive
Everything we have published
Newest first. Each piece carries its sources, states which of its figures are schematics rather than measurements, and stays readable from start to finish without a paywall or a form.
-
When the attack fits in 0.01% of the packets: IP flow entropy in the age of encrypted traffic
Why volume-based detectors miss scans and probes, and how entropy over IP flow metadata keeps working after payloads became encrypted by default.