An intrusion detection model orienting towards encrypted conversation

This paper presented an intrusion detection model, which can analyze encrypted datagram of IPSEC. In this model, after ldquokey and SArdquo was successfully exchanged, key exchange program first encrypted it, and then stored it to directory server. At the same time, intrusion detection system got ldquoKey and SArdquo of connection by analyzing directory operation messages, and used it to decrypt datagram. Finally, this paper has analyzed model security and implementation method.