Unexpected Outbound Protocol (UNX-OBP)
February 2023 • Poster
Sean Hutchison
This poster describes the Unexpected Outbound Protocol (UNX-OBP) capability.
Abstract
This poster was presented at FloCon 2023, an annual conference that focuses on applying any and all collected data to defend enterprise networks.
The Unexpected Outbound Protocol (UNX-OBP) capability is a frequency analysis and anomaly based defensive layer that enables defenders to better know their network and force adversaries to really blend in by highlighting new, rarely seen, and/or inconsistent outbound protocol use.