Method and apparatus for network attack detection by determining temporal data correlations

摘要

The method involves receiving frames sent over a communication network by a receiving unit (14), and analyzing a temporal difference distribution between the frames sent over the communication network by an analyzing unit (17) to determine if the temporal difference distribution corresponds to a memory distribution. The temporal difference corresponds to a reception time difference between the frames sent over the network. Independent claims are also included for the following: (1) a device for detecting that an equipment sends a large number of frames (2) a computer program comprising code portions to perform a method for detecting the frame transmission (3) a programmable component comprising code portions to perform a method for detecting the frame transmission (4) a method for detecting an attack in a communication network (5) a computer program comprising code portions to perform a method for detecting an attack in a communication network.