| 摘要 |
FIELD: electric communications, possible implementation by attack detection systems. ^ SUBSTANCE: method includes recording supporting identifiers of sanctioned information streams, setting maximally allowed number of appearances of each of unsanctioned information streams, receiving serially of message packets, recording, separating identifiers from headers of these packets, comparing these to supporting identifiers, in case of match, receiving another message packet, comparison cycle is repeated, if match is not found, identifiers of stream are recorded, next identification number is assigned thereto, number of its appearances is increased by one, and assigned identifiers of another received packet after their comparison and in case of mismatch are compared to identifiers of previously recorded unsanctioned information stream, in case of match number of appearances is increased by one, in case of mismatch identifiers of this stream are recorded, it is assigned another identification number and number of its appearances is incremented by one. ^ EFFECT: higher trustworthiness of detection of unsanctioned information streams. ^ 8 dwg |
