As an illustration, an attack on an encrypted protocol can't be study by an IDS. In the event the IDS can not match encrypted traffic to current databases signatures, the encrypted targeted traffic is not encrypted. This can make it very hard for detectors to identify assaults.