发明名称 |
Intrusion detection method using adaptive rule estimation in network-based instrusion detection system |
摘要 |
An intrusion detection method by adaptive rule estimation in a network-based intrusion detection system (NDS) is disclosed. The method includes collecting a packet on a network and searching for an original rule most similar to the collected packet from a rule database in which a rule for intrusion detection is stored, and judging whether a hacker intrudes by estimating a changed position of the collected packet from the original rule. Accordingly, it is possible to prevent an indirect attack of a hacker using a packet whose number of bits is changed due to deletion/insertion of characters from/into the packet.
|
申请公布号 |
US2003115486(A1) |
申请公布日期 |
2003.06.19 |
申请号 |
US20020273140 |
申请日期 |
2002.10.18 |
申请人 |
CHOI BYEONG CHEOL;SEO DONG IL;SOHN SUNG WON;PARK CHEE HANG |
发明人 |
CHOI BYEONG CHEOL;SEO DONG IL;SOHN SUNG WON;PARK CHEE HANG |
分类号 |
H04L12/22;G06F21/00;H04L29/06;(IPC1-7):G06F11/30 |
主分类号 |
H04L12/22 |
代理机构 |
|
代理人 |
|
主权项 |
|
地址 |
|