专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20070206498A1 Network status display device and method using traffic flow-radar 有权
标题翻译：网络状态显示装置及方法采用交通流雷达
公开(公告)号：US20070206498A1
公开(公告)日：2007-09-06
申请号：US11599909
申请日：2006-11-15
申请人： Beom Chang , Jung Na , Geon Kim , Dong Kim , Jin Kim , Hyun Kim , Hyo Bang , Soo Lee , Seon Sohn , Jong Jang , Sung Sohn
发明人： Beom Chang , Jung Na , Geon Kim , Dong Kim , Jin Kim , Hyun Kim , Hyo Bang , Soo Lee , Seon Sohn , Jong Jang , Sung Sohn
IPC分类号： H04L12/26
CPC分类号： H04L43/045 , H04L43/0817 , H04L43/16
摘要： A network status display device using a traffic flow-radar is provided. The network status display device includes: a traffic feature extractor calculating flow occupancy rates for total flows, micro-flows and macro-flows with respect to each of a plurality of traffic features with reference to traffic information for each traffic feature such as a network address, a port, a transmitting/receiving host address or a protocol collected by an external traffic information collector, and storing the calculation result; a traffic status display unit displaying the flow occupancy rates for each traffic feature calculated and stored in the traffic feature extractor on a radar with dots for each traffic feature; and a traffic anomaly determination unit determining whether a network status is abnormal with reference to the radar for each traffic feature, detecting and reporting the type of the abnormal network status and harmful or abnormal traffic that generates the abnormal network status, when the abnormal status occurs.
摘要翻译：提供了使用交通流量雷达的网络状态显示装置。网络状态显示装置包括：业务特征提取器，参考每个业务特征（例如网络地址）的业务信息来计算关于多个业务特征中的每一个的总流量，微流量和宏流量的流量占用率，端口，发送/接收主机地址或由外部交通信息收集器收集的协议，并存储计算结果; 交通状态显示单元，其显示针对每个交通特征点的雷达上计算并存储在交通特征提取器中的每个交通特征的流量占用率; 以及交通异常判定单元，针对每个流量特征，参照雷达确定网络状态是否异常，检测和报告异常网络状态的类型以及产生异常网络状态的有害或异常流量，当发生异常状态时。

2. 发明申请

US20060119486A1 Apparatus and method of detecting network attack situation 有权
公开(公告)号：US20060119486A1
公开(公告)日：2006-06-08
申请号：US11081682
申请日：2005-03-17
申请人： Jin Kim , Seon Sohn , Hyochan Bang , Soo Lee , Dongyoung Kim , Beom Chang , Geon Kim , Hyun Kim , Jung Na , Jong Jang , Sung Sohn
发明人： Jin Kim , Seon Sohn , Hyochan Bang , Soo Lee , Dongyoung Kim , Beom Chang , Geon Kim , Hyun Kim , Jung Na , Jong Jang , Sung Sohn
IPC分类号： G08B5/22
CPC分类号： H04L63/1416 , G06F21/552 , G06F21/85 , H04L63/1441
摘要： Provided is an apparatus for detecting a network attack situation. The apparatus includes an alarm receiver receiving a plurality of alarms raised in a network to which the alarm receiver is connected, converting the alarms into predetermined alarm data, and outputting the alarm data; an alarm processor analyzing an attack situation in the network based on attributes of the alarm data and a number of times that the alarm data is generated; a memory storing basic data needed to analyze the state of the network and providing the basic data to the alarm processor; and an interface transmitting the result of the analysis by the alarm processor to an external device, receiving a predetermined critical value from the external device, which is a basis for determining the occurrence of the attack situation, and outputting the critical value to the alarm processor such that the alarm processor can store the critical value in the memory. Equal numbers of hash engines and detection engines for processing the alarms in the network to the number of data groups classified as network attack situations are formed in a line. Therefore, a network attack situation can be detected in real time based on a great number of alarms indicating intrusion detection.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式