System and method for identifying encrypted, pre-recorded media content in packet data networks

A non-transitory, machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising:

• calculating a segment size for each encrypted segment in encrypted hypertext transport protocol (HTTPS) traffic carrying media content;
• determining one or more indices from a sliding window of a plurality of segment sizes of consecutive encrypted segments, wherein each index of the one or more indices are calculated from a mathematical combination of segment sizes in the plurality of segment sizes in the sliding window;
• and
• identifying the media content by matching the indices with a reference in a catalog.

A method, comprising:

• calculating, by a processing system comprising a processor, a segment size for each encrypted segment in encrypted hypertext transport protocol (HTTPS) traffic including media content;
• determining one or more indices, by the processing system, from a sliding window of a plurality of segment sizes of consecutive encrypted segments, wherein each index of the one or more indices is determined by a ratio of a sum of one or more segment sizes in the plurality of segment sizes to a total of the segment sizes in the plurality of segment sizes;
• and
• identifying, by the processing system, the media content by matching the indices with a reference.