search menu icon-carat-right cmu-wordmark

Unexpected Outbound Protocol (UNX-OBP)

February 2023 Poster
Sean Hutchison

This poster describes the Unexpected Outbound Protocol (UNX-OBP) capability.


Software Engineering Institute



This poster was presented at FloCon 2023, an annual conference that focuses on applying any and all collected data to defend enterprise networks.

The Unexpected Outbound Protocol (UNX-OBP) capability is a frequency analysis and anomaly based defensive layer that enables defenders to better know their network and force adversaries to really blend in by highlighting new, rarely seen, and/or inconsistent outbound protocol use.