KDADK-APPID Encrypted-Traffic Analysis Library

KDADK-APPID is the network flow classification library of Kunpeng BoostKit for IDA. It includes flow aggregation, protocol detection, feature calculation, an AI engine, and a training tool package. It is optimized for Kunpeng features and can analyze both plaintext and encrypted traffic in real time. This addresses the limitations of conventional rule-based data distribution solutions that cannot analyze encrypted traffic, providing an end-to-end reference solution for the industry's common challenges.

Key technologies of KDADK-APPID:

Flow aggregation, protocol parsing, feature extraction, and AI inference.

Application scenarios of KDADK-APPID:

Application classification, malicious content detection, traffic probe, etc.