CYBER ATTACK DETECTION DEVICE AND METHOD BASED ON EVENT ANALYSIS

摘要

PROBLEM TO BE SOLVED: To provide a cyber attack detection device and method based on event analysis.SOLUTION: A cyber attack detection device includes: an event reception part connected to a Web server for receiving an event which occurs from at least one user terminal in accordance with the operation of a user who uses a Web service provided from a Web page; a model generation part for extracting an event pattern equivalent to the operation of the user on the basis of the received event to generate an event model; and an attack detection part for comparing the event model with the event received from a specific user terminal, and for detecting whether or not access to the Web server of the specific user terminal is an attack. Thus, it is possible to quickly and accurately detect various forms of cyber attacks, and to provide a highly available and reliable security service.