An environment for security protocol intrusion detection

摘要: Secure electronic communication relies on cryptography. Even with perfect encryption, may be compromised without effective security protocols for key exchange, authentication, etc. We are now seeing proliferation of large secure environments characterized by high volume, encrypted traffic between principals, facilitated Public Key Infrastructures (PKI). PKIs dependent protocols. Unfortunately, susceptible to subtle errors. To date, we have relied formal methods tell us if effective. These do not provide complete or measurable protocol security. Security also subject the same implementation and administrative vulnerabilities as As a result, will continue operate that flaws. In this paper, describe method architecture detect intrusions in such Infrastructures. Our is based classic intrusion detection techniques knowledge-based behavior-based detection. 2 Section