Managing data transmission using transport layer security fingerprints and tcp/ip addresses

A computer system comprising:

• a processor set;
• a set of one or more computer-readable storage media;
• and
• program instructions stored on the set of one or more storage media to cause the processor set to perform operations comprising:
• receiving a number of traffic packets comprising TCP/IP packets from a number of sources;
• determining whether transmission for the number of traffic packets exceeds a pre-defined data transmission rate;
• in response to determining that the transmission for the number of traffic packets exceeds the pre-defined data transmission rate, collecting information associated with the number of traffic packets;
• analyzing a transport layer security (TLS) fingerprint associated with the number of traffic packets to determine whether combination of the transport layer security (TLS) fingerprint and TCP/IP address for the number of traffic packets is associated with a number of known issues;
• and
• in response to determining that the combination of the transport layer security (TLS) fingerprint and the TCP/IP address for the number of traffic packets is associated with a number of known issues, blocking data transmission for the number of traffic packets.

A computer program product comprising:

• a set of one or more computer-readable storage media;
• program instructions stored in the set of one or more computer-readable storage media to perform operations comprising:
• receiving, by a processor set, a number of traffic packets comprising TCP/IP packets from a number of sources;
• determining, by the processor set, whether transmission for the number of traffic packets exceeds a pre-defined data transmission rate;
• in response to determining that the transmission for the number of traffic packets exceeds the pre-defined data transmission rate, collecting, by the processor set, information associated with the number of traffic packets;
• analyzing, by the processor set, a transport layer security (TLS) fingerprint associated with the number of traffic packets to determine whether combination of the transport layer security (TLS) fingerprint and TCP/IP address for the number of traffic packets is associated with a number of known issues;
• and
• in response to determining that the combination of the transport layer security (TLS) fingerprint and the TCP/IP address for the number of traffic packets is associated with a number of known issues, blocking, by the processor set, data transmission for the number of traffic packets.