| 摘要 |
PURPOSE: A system for detecting the hacking of a PC is provided to interrupt the hacking from an internal attacker through ID stealth by interrupting the hacking from the internal attacker as well as the attack from the outside. CONSTITUTION: A packet collector(210) collects a packet through an external and an internal network. A recombiner(220) condenses and converts the data of the collected packet into an understandable constant form. An analyzer(230) analyzes the recombined data. A hacking detector(240) detects the hacking by applying a hacking detection rule to the analyzed data. An hacking confronter(250) performs the confrontation such as storage and alarm for the hacking detection or the protection object data.
|
