Patent ID: 7624444

Claim:
A computer implemented decryption method for detecting an intrusion, comprising: receiving a plurality of encrypted packets utilizing a network; decrypting the encrypted packets; and detecting an intrusion based on an inspection of the decrypted packets; wherein a plurality of intrusions are detected including probes and port scans, compromise of confidentiality attacks, compromise of authentication attacks, compromise of data integrity attacks, denial of services attacks, and violation of security policy attacks; wherein the compromise of confidentiality attacks expose sensitive information, the compromise of confidentiality attacks including sniffing a sub-net, transmitting confidential information via tunneled channels, and forcing system core dumps, wherein a public key and a private key of a server computer are used to monitor a key exchange protocol between a client computer and the server computer; wherein the public key and the private key are obtained by a sensor via a secure channel to a sensor management system.