Real-Time Threat Detection in Encrypted Cloud Traffic using Oracle Zero Trust Packer Routing (ZPR)

As more organizations transition to cloud-native environments, the need for encrypted communication has grown rapidly—primarily to protect user privacy and meet regulatory compliance. However, this widespread encryption also creates a major hurdle for traditional threat detection tools, which typically rely on deep packet inspection (DPI) to analyze traffic. This paper presents a new real-time threat detection architecture designed specifically for encrypted cloud traffic, utilizing Oracle’s Zero Trust Packer Routing (ZPR). Our solution introduces a lightweight, metadata-based detection framework embedded directly into the ZPR control plane. It combines flow-level metadata, behavioral analytics, and third-party threat intelligence to detect suspicious activity without decrypting traffic. We evaluated this system using real-world workloads on Oracle Cloud Infrastructure (OCI), where it achieved 94% detection accuracy with negligible impact on system latency and network throughput. By addressing the challenge of observability in encrypted environments, this approach enables secure, privacy-compliant monitoring in multi-tenant cloud architectures.

Cybersecurity Cloud Computing Computer Networks