专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08341742B2 Network attack detection devices and methods 有权
标题翻译：网络攻击检测设备和方法
公开(公告)号：US08341742B2
公开(公告)日：2012-12-25
申请号：US12837986
申请日：2010-07-16
申请人： Hahn-Ming Lee , Si-Yu Huang , Jerome Yeh , Ching-Hao Mao
发明人： Hahn-Ming Lee , Si-Yu Huang , Jerome Yeh , Ching-Hao Mao
IPC分类号： H04L29/06
CPC分类号： H04L63/1416 , H04L29/12066 , H04L61/1511
摘要： A network attack detection device is provided, including a spatial coordinate database for storing spatial coordinate data; a standard time zone database for storing standard time zone data; a domain name system packet collector for collecting a domain name system packet; a spatial snapshot feature extractor for extracting internet protocol address corresponding to the domain name system packet according to the domain name system packet, and generating spatial feature data corresponding to the internet protocol address according to the internet protocol address, the spatial coordinate data and the standard time zone data; and an attack detector for determining whether the domain name system packet is an attack according to the spatial feature data and a spatial snapshot detection model, and when determining that the domain name system packet is an attack, sending a warning to indicate the attack.
摘要翻译：提供一种网络攻击检测装置，包括用于存储空间坐标数据的空间坐标数据库; 用于存储标准时区数据的标准时区数据库; 用于收集域名系统包的域名系统包收集器; 空间快照特征提取器，用于根据域名系统分组提取与域名系统分组对应的互联网协议地址，并根据因特网协议地址，空间坐标数据和标准产生与互联网协议地址对应的空间特征数据时区数据; 以及用于根据空间特征数据和空间快照检测模型来确定域名系统分组是否是攻击的攻击检测器，并且当确定域名系统分组是攻击时，发送指示攻击的警告。

IPRDB

热门服务

关于我们

友情链接

联系方式