专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08014310B2 Apparatus and method for visualizing network situation using security cube 有权
标题翻译：使用安全立方体可视化网络情况的装置和方法
公开(公告)号：US08014310B2
公开(公告)日：2011-09-06
申请号：US12516494
申请日：2007-08-23
申请人： Beom-Hwan Chang , Chi-Yoon Jeong , Seon-Gyoung Sohn , Soo-Hyung Lee , Hyo-Chan Bang , Geon-Lyang Kim , Hyun-Joo Kim , Won-Joo Park , Jong-Ho Ryu , Jong-Hyun Kim , Jong-Soo Jang , Sung-Won Sohn , Jung-Chan Na
发明人： Beom-Hwan Chang , Chi-Yoon Jeong , Seon-Gyoung Sohn , Soo-Hyung Lee , Hyo-Chan Bang , Geon-Lyang Kim , Hyun-Joo Kim , Won-Joo Park , Jong-Ho Ryu , Jong-Hyun Kim , Jong-Soo Jang , Sung-Won Sohn , Jung-Chan Na
IPC分类号： H04L12/26
CPC分类号： H04L63/1441 , H04L63/20
摘要： An apparatus and method for visualizing a network condition related to a network security are provided. The apparatus includes a traffic feature extracting unit, a network condition displaying unit, and a traffic abnormal condition determining unit. The traffic feature extracting unit extracts information including source address, source port, destination address, and destination port from network traffics, selects two of the extracted information, and calculates unique dispersion degrees of two unselected information. The network condition displaying unit displays a two-dimensional cube expressed using the calculated unique dispersion degrees for the classified traffics. The traffic abnormal condition determining unit determines whether the traffics are in an abnormal condition or not based on the two-dimensional security cube.
摘要翻译：提供了一种用于可视化与网络安全相关的网络条件的装置和方法。该装置包括交通特征提取单元，网络状态显示单元和交通异常状况判定单元。流量特征提取单元从网络流量提取包括源地址，源端口，目的地址和目的地端口的信息，选择两个提取的信息，并计算两个未选择信息的唯一色散度。网络条件显示单元显示使用所计算的分类业务的唯一色散度表示的二维立方体。交通异常判定单元基于二维安全立方体来判定是否处于异常状态。

2. 发明申请

US20100067391A1 APPARATUS AND METHOD FOR VISUALIZING NETWORK SITUATION USING SECURITY CUBE 有权
标题翻译：使用安全库可视化网络状况的装置和方法
公开(公告)号：US20100067391A1
公开(公告)日：2010-03-18
申请号：US12516494
申请日：2007-08-23
申请人： Beom-Hwan Chang , Chi-Yoon Jeong , Seon-Gyoung Sohn , Soo-Hyung Lee , Hyo-Chan Bang , Geon-Lyang Kim , Hyun-Joo Kim , Won-Joo Park , Jong-Ho Ryu , Jong-Hyun Kim , Jong-Soo Jang , Sung-Won Sohn , Jung-Chan Na
发明人： Beom-Hwan Chang , Chi-Yoon Jeong , Seon-Gyoung Sohn , Soo-Hyung Lee , Hyo-Chan Bang , Geon-Lyang Kim , Hyun-Joo Kim , Won-Joo Park , Jong-Ho Ryu , Jong-Hyun Kim , Jong-Soo Jang , Sung-Won Sohn , Jung-Chan Na
IPC分类号： H04L12/26
CPC分类号： H04L63/1441 , H04L63/20
摘要： An apparatus and method for visualizing a network condition related to a network security are provided. The apparatus includes a traffic feature extracting unit, a network condition displaying unit, and a traffic abnormal condition determining unit. The traffic feature extracting unit extracts information including source address, source port, destination address, and destination port from network traffics, selects two of the extracted information, and calculates unique dispersion degrees of two unselected information. The network condition displaying unit displays a two-dimensional cube expressed using the calculated unique dispersion degrees for the classified traffics. The traffic abnormal condition determining unit determines whether the traffics are in an abnormal condition or not based on the two-dimensional security cube.
摘要翻译：提供了一种用于可视化与网络安全相关的网络状况的装置和方法。该装置包括交通特征提取单元，网络状态显示单元和交通异常状况判定单元。流量特征提取单元从网络流量提取包括源地址，源端口，目的地址和目的地端口的信息，选择两个提取的信息，并计算两个未选择信息的唯一色散度。网络条件显示单元显示使用所计算的分类业务的唯一色散度表示的二维立方体。交通异常判定单元基于二维安全立方体来判定是否处于异常状态。

3. 发明申请

US20050108377A1 Method for detecting abnormal traffic at network level using statistical analysis 审中-公开
标题翻译：采用统计分析方法检测网络异常流量
公开(公告)号：US20050108377A1
公开(公告)日：2005-05-19
申请号：US10749502
申请日：2003-12-31
申请人： Soo-Hyung Lee , Beom-Hwan Chang , Jin-Oh Kim , Jung-Chan Na , Sung-Won Sohn , Chee-Hang Park
发明人： Soo-Hyung Lee , Beom-Hwan Chang , Jin-Oh Kim , Jung-Chan Na , Sung-Won Sohn , Chee-Hang Park
IPC分类号： H04L12/26 , G06F15/173 , H04L29/06
CPC分类号： H04L63/1408
摘要： Disclosed is a method of detecting abnormal traffic at the network level using a statistical analysis and a computer-readable recording medium for recording a program that implements the method. The method includes the steps of: a) gathering local traffic data from each network device and integrating a plurality of the local traffic data to generate traffic data in a network level; b) extracting a characteristic traffic data based on the traffic data in the network level; c) comparing the characteristic traffic data with a characteristic traffic data profile resulting from statistical computations, and determining whether there is abnormal traffic in the network; and d) updating the characteristic traffic data profile using the characteristic traffic data if there is no abnormal traffic in the network, analyzing seriousness of the abnormal traffic and monitoring the abnormal traffic if there is abnormal traffic in the network.
摘要翻译：公开了一种使用统计分析来检测网络级的异常业务的方法，以及用于记录实现该方法的程序的计算机可读记录介质。该方法包括以下步骤：a）从每个网络设备收集本地业务数据，并集成多个本地业务数据以在网络层面生成业务数据; b）基于网络级的业务数据提取特征话务数据; c）将所述特征话务数据与由统计计算得到的特征话务数据简档进行比较，以及确定所述网络中是否存在异常业务; 以及d）如果网络中没有异常流量，则使用特征流量数据更新特征流量数据简档，分析网络异常流量时异常流量的严重性，监控异常流量。

4. 发明授权

US07664950B2 Method for dynamically changing intrusion detection rule in kernel level intrusion detection system 失效
标题翻译：在内核级入侵检测系统中动态更改入侵检测规则的方法
公开(公告)号：US07664950B2
公开(公告)日：2010-02-16
申请号：US10748406
申请日：2003-12-29
申请人： Bo-Heung Chung , Seungho Ryu , Jeong-Nyeo Kim , Sung-Won Sohn , Chee-Hang Park
发明人： Bo-Heung Chung , Seungho Ryu , Jeong-Nyeo Kim , Sung-Won Sohn , Chee-Hang Park
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , G06F21/55 , H04L63/1416 , H04L63/1441
摘要： A method for dynamically changing an intrusion detection rule in a kernel level intrusion detection system is disclosed. The method includes the steps of: a) generating a replica of the intrusion detection rule in a kernel area; b) changing the replica of the intrusion detection rule according to a request of changing the intrusion detection rule from the kernel area; and c) changing a currently applied intrusion detection rule by exchanging a value of a pointer representing the intrusion detection rule with a value of a pointer representing the changed replica of the intrusion detection rule.
摘要翻译：公开了一种在内核级入侵检测系统中动态地改变入侵检测规则的方法。该方法包括以下步骤：a）在内核区域中生成入侵检测规则的副本; b）根据从内核区域更改入侵检测规则的请求，更改入侵检测规则的副本; 以及c）通过用代表入侵检测规则的改变的副本的指针的值交换表示入侵检测规则的指针的值来改变当前应用的入侵检测规则。

5. 发明申请

US20050081046A1 Network correction security system and method 有权
标题翻译：网络校正安全系统及方法
公开(公告)号：US20050081046A1
公开(公告)日：2005-04-14
申请号：US10882749
申请日：2004-06-30
申请人： Seung-Min Lee , Taek-Yong Nam , Sung-Won Sohn , Chee-Hang Park
发明人： Seung-Min Lee , Taek-Yong Nam , Sung-Won Sohn , Chee-Hang Park
IPC分类号： H04L12/22 , G02F1/00 , H04L29/06
CPC分类号： H04L63/1458
摘要： A network correction security system. The network correction security system connected between a network node and a security-related external system, detects attacks on the network node, corrects weak parts of the performance of the network node, collects information for improving the security performance of the network node from a security-related external system, analyzes the information, monitors principal resources of the network node to detect a fault, and removes the fault according to a measure corresponding to a grade of the fault. The network correction security system carries out a recovery process when the fault has not been corrected, and recovers the functions of the network node according to a recovery mechanism when the fault has not been removed after the recovery process.
摘要翻译：网络校正安全系统。连接在网络节点和安全相关的外部系统之间的网络校正安全系统，检测对网络节点的攻击，纠正网络节点性能的弱点，从安全性中收集提高网络节点安全性能的信息相关的外部系统，分析信息，监控网络节点的主要资源以检测故障，并根据与故障等级对应的措施消除故障。网络校正安全系统在故障未得到纠正的情况下执行恢复过程，并且在恢复过程中还没有删除故障时，根据恢复机制恢复网络节点的功能。

6. 发明授权

US07457949B2 Network correction security system and method 有权
标题翻译：网络校正安全系统及方法
公开(公告)号：US07457949B2
公开(公告)日：2008-11-25
申请号：US10882749
申请日：2004-06-30
申请人： Seung-Min Lee , Taek-Yong Nam , Sung-Won Sohn , Chee-Hang Park
发明人： Seung-Min Lee , Taek-Yong Nam , Sung-Won Sohn , Chee-Hang Park
IPC分类号： G06F9/00
CPC分类号： H04L63/1458
摘要： A network correction security system. The network correction security system connected between a network node and a security-related external system, detects attacks on the network node, corrects weak parts of the performance of the network node, collects information for improving the security performance of the network node from a security-related external system, analyzes the information, monitors principal resources of the network node to detect a fault, and removes the fault according to a measure corresponding to a grade of the fault. The network correction security system carries out a recovery process when the fault has not been corrected, and recovers the functions of the network node according to a recovery mechanism when the fault has not been removed after the recovery process.
摘要翻译：网络校正安全系统。连接在网络节点和安全相关的外部系统之间的网络校正安全系统，检测对网络节点的攻击，纠正网络节点性能的弱点，从安全性中收集提高网络节点安全性能的信息相关的外部系统，分析信息，监控网络节点的主要资源以检测故障，并根据与故障等级对应的措施消除故障。网络校正安全系统在故障未得到纠正的情况下执行恢复过程，并且在恢复过程中还没有删除故障时，根据恢复机制恢复网络节点的功能。

7. 发明申请

US20080134346A1 Transactions Certification Method And System To Protect Privacy On Details Of Electronic Transactions 审中-公开
标题翻译：交易认证方法和系统保护电子交易详情
公开(公告)号：US20080134346A1
公开(公告)日：2008-06-05
申请号：US11573175
申请日：2004-12-13
申请人： Yeong-Sub Cho , Jong-Hyouk Noh , Sang-Rae Cho , Dae-Seon Choi , Taesung Kim , Seung-Hyun Kim , Seung-Hun Jin , Do-Won Hong , Kyo-Il Chung , Sung-Won Sohn
发明人： Yeong-Sub Cho , Jong-Hyouk Noh , Sang-Rae Cho , Dae-Seon Choi , Taesung Kim , Seung-Hyun Kim , Seung-Hun Jin , Do-Won Hong , Kyo-Il Chung , Sung-Won Sohn
IPC分类号： G06F7/04
CPC分类号： G06Q20/02 , G06Q20/3829 , G06Q30/06
摘要： Provided are a transactions certification method and system to protect privacy on details of electronic transactions, the method comprising the operations of: a) receiving and registering client information which is encoded so that a client cannot be identified; b) receiving and storing transactions details of a client including a client transactions identifier encoded by the service provider server; c) after receiving client certification information for client certification, performing client certification by comparing the client information previously registered in the operation a) with the received client certification information; d) receiving a client transactions identifier for searching transactions details of a client when the client certification is performed in the operation c), and determining whether the client transactions identifier and the client transactions identifier previously stored in the operation b) are identical with each other; and c) generating a message corresponding to the transactions details of the client and sending the generated message to the client when it is determined that the client transactions identifiers are identical with each other in the operation d). Accordingly, the transactions details can be managed while protecting privacy on the transactions details of the client.
摘要翻译：提供了一种交易认证方法和系统，以保护电子交易细节上的隐私，该方法包括以下操作：a）接收和注册被编码以便客户端不能被识别的客户端信息; b）接收和存储包括由服务提供商服务器编码的客户端交易标识符的客户端的交易细节; c）在收到客户认证信息后，通过比较先前在操作a）中注册的客户信息与接收的客户端认证信息进行客户端认证; d）当在操作c）中执行客户端认证时，接收用于搜索客户端的事务细节的客户端事务标识符，并且确定先前存储在操作b）中的客户端事务标识符和客户端事务标识符是否彼此相同 ; 以及c）当在所述操作d）中确定所述客户端事务标识符彼此相同时，生成与所述客户端的事务细节相对应的消息并将所生成的消息发送到所述客户端。因此，可以管理交易细节，同时保护客户端的交易细节上的隐私。

8. 再颁专利

USRE45381E1 Network correction security system and method 有权
标题翻译：网络校正安全系统及方法
公开(公告)号：USRE45381E1
公开(公告)日：2015-02-17
申请号：US12954373
申请日：2010-11-24
申请人： Seung-Min Lee , Taek-Yong Nam , Sung-Won Sohn , Ye Seok Cho
发明人： Seung-Min Lee , Taek-Yong Nam , Sung-Won Sohn , Chee-Hang Park
IPC分类号： G06F9/00
CPC分类号： H04L63/1458
摘要： A network correction security system. The network correction security system connected between a network node and a security-related external system, detects attacks on the network node, corrects weak parts of the performance of the network node, collects information for improving the security performance of the network node from a security-related external system, analyzes the information, monitors principal resources of the network node to detect a fault, and removes the fault according to a measure corresponding to a grade of the fault. The network correction security system carries out a recovery process when the fault has not been corrected, and recovers the functions of the network node according to a recovery mechanism when the fault has not been removed after the recovery process.
摘要翻译：网络校正安全系统。连接在网络节点和安全相关的外部系统之间的网络校正安全系统，检测对网络节点的攻击，纠正网络节点性能的弱点，从安全性中收集提高网络节点安全性能的信息相关的外部系统，分析信息，监控网络节点的主要资源以检测故障，并根据与故障等级对应的措施消除故障。网络校正安全系统在故障未得到纠正的情况下执行恢复过程，并且在恢复过程中还没有删除故障时，根据恢复机制恢复网络节点的功能。

9. 发明申请

US20050102505A1 Method for dynamically changing intrusion detection rule in kernel level intrusion detection system 失效
标题翻译：在内核级入侵检测系统中动态更改入侵检测规则的方法
公开(公告)号：US20050102505A1
公开(公告)日：2005-05-12
申请号：US10748406
申请日：2003-12-29
申请人： Bo-Heung Chung , Seungho Ryu , Jeong-Nyeo Kim , Sung-Won Sohn , Chee-Hang Park
发明人： Bo-Heung Chung , Seungho Ryu , Jeong-Nyeo Kim , Sung-Won Sohn , Chee-Hang Park
IPC分类号： G06F15/00 , G06F21/00 , H04L9/00 , H04L29/06
CPC分类号： H04L63/0263 , G06F21/55 , H04L63/1416 , H04L63/1441
摘要： A method for dynamically changing an intrusion detection rule in a kernel level intrusion detection system is disclosed. The method includes the steps of: a) generating a replica of the intrusion detection rule in a kernel area; b) changing the replica of the intrusion detection rule according to a request of changing the intrusion detection rule from the kernel area; and c) changing a currently applied intrusion detection rule by exchanging a value of a pointer representing the intrusion detection rule with a value of a pointer representing the changed replica of the intrusion detection rule.
摘要翻译：公开了一种在内核级入侵检测系统中动态地改变入侵检测规则的方法。该方法包括以下步骤：a）在内核区域中生成入侵检测规则的副本; b）根据从内核区域更改入侵检测规则的请求，更改入侵检测规则的副本; 以及c）通过用代表入侵检测规则的改变的副本的指针的值交换表示入侵检测规则的指针的值来改变当前应用的入侵检测规则。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式