Intrusion detection with early recognition of encrypted application

Abstract

The growing number of threats and attacks, that are also present in encrypted communication, give a great importance to Intrusion Detection and Prevention Systems (IDPS). Some of these attacks have a great impact on service availability. This paper presents a way of detecting these attacks and threats by correctly classifying the early recognized encrypted applications. The proposed architecture uses anomaly detection in comparison with early recognized encrypted applications to determine intrusive and non-intrusive behavior.