| 摘要 |
PURPOSE: An invasion blocking system using a relational offense pattern and a method thereof are provided to reduce the offense pattern false detection rate of the invasion blocking system, thereby enabling sufficient usage of the offense detecting and blocking function of the invasion blocking system. CONSTITUTION: A relational determination database (140) stores the detected offense pattern, the time in which the detected offense pattern is detected, and a source IP address of the network packet in which the detected offense pattern is included. A relational offense determining unit (150) determines whether the offense pattern stored in the relational determination database corresponds to the relational offense pattern or not, in reference to the offense pattern database. If the offense pattern detected by the offense pattern detection unit corresponds to the relational offense pattern, a packet blocking unit (160) blocks the network packet including the detected offense pattern. [Reference numerals] (110) Receiving unit; (120) Offense pattern database; (130) Offense pattern sensing unit; (140) Relational determination database; (150) Relational offense determining unit; (160) Packet blocking unit; (170) Block IP database; (180) First relational study database; (190) Second relational study database |
