HOST BASED INTEGRATED INTRUSION DETECTING SYSTEM HAVING FUNCTION FOR INTEGRALLY JUDGING MISUSING ACTIVITY AND ABNORMAL ACTIVITY, AND METHOD THEREOF

摘要

PURPOSE: A host based integrated intrusion detecting system having a function for integrally judging a misusing activity and an abnormal activity, and a method thereof are provided to extend a detection range and to enhance correctness of a detection result through the integration of the misuse activity and the abnormal activity. CONSTITUTION: A host(1) connecting to a LAN(Local Area Network) through an electronic communication line comprises an agent(104) and a sensor part(103) of a client/server network form. The agent comprises a judging part(102) integrally judging information detected by the sensor part and a transmitting part(101) transferring the detection result to other system for an integration or login purpose. The sensor part comprises plural host based models of abnormal activity sensors(105,106) and misusing activity sensors(107).