| 摘要 |
An abnormal behavior detecting system according to the present invention, as an abnormal behavior detecting system to detect an abnormal use behavior of a user in a bring your own device (BYOD) and a smart work environment, comprises: a context information collecting unit to receive all kinds of context information from a context information collecting system; a context information processing unit to produce a detecting request message if context information regarding termination (access termination) is received and to transmit the detecting request message to an abnormality detection unit; the abnormality detection unit to detect an abnormal use behavior by analyzing behavior frequency in the same access situation generated during an entire access period through a use behavior pattern analysis of the entire access period if the detecting request message is received; a profile management unit to profile the context information according to all kinds of use behaviors of the user and to store and manage the same; and an information analyzing unit to analyze an web site and DB use information through the received context information. The present invention realizes a method to detect an abnormal behavior by patterning a behavior based on various behavior elements such as time, position, access network, used machinery, etc. in contrast with existing network based security equipment through a network traffic analysis. The abnormal behavior detecting system according to the present invention is to improve system security in the BYOD and the smart work environment and detects a behavior such as the abnormal access and use of a terminal device by using the use behavior pattern analysis of an entire personalized access period after processing the context information as access, use, and agent situation information and profile information. |
