METHOD AND APPARATUS FOR DETECTING AND BLOCKING NETWORK ATTACK WITHOUT ATTACK SIGNATURE

摘要

A method and an apparatus for detecting and blocking a network attack without using a signature are provided to automatically detect and block new network attacks for which a signature has not been formed and other various hacking attacks. A list of services provided in an internal network is generated and stored(S310). A service requested by a packet introduced into the internal network is compared with the service list to check whether or not the introduced packet is a patrol packets for attacking a network(S320). If the introduced packet is a patrol packet, a response packet is manipulated according to the patrol packet and transmitted(S330).