| 摘要 |
An active security surveillance system is provided to improve security of a home network and efficiency of operation management by actively detecting and dealing with the intrusion and attack. An intrusion detecting unit(111) detects the illegal intrusion by comparing the data packet information received from the outside of the network with the intrusion pattern information stored in the database. The intrusion detecting unit blocks the detected intrusion and generates and transmits the intrusion detection/block event log to an event controller(113). A threat controller(112) monitors the network flow, detects an anomaly, and analyzes the detected anomaly. The threat controller produces the analyzed information to the event log and transmits the event log to the event controller. The event controller integrally processes the event log received from the intrusion detecting unit and the threat controller. A database(114) stores the intrusion pattern information and the information processed in the event controller. |
