Security System for Encrypted Environments (S2E2)

The percentage of encrypted network traffic increases steadily not only by virtual private networks of companies but also by protocols like SSH or SSL in the private sector. Traditional Intrusion Detection Systems (IDS) are not able to cope with encrypted traffic. There are a few systems which are able to handle encrypted lines but none of them is applicable in general because of the necessity of adapted network protocols, a restricted application range or high false alarm rates. We propose a new IDS for non-intrusive behavior-based intrusion and extrusion detection in encrypted environments.