专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

2. 发明公开

EP4164177A1 METHOD FOR AUTOMATIC AGGREGATING AND ENRICHING DATA FROM HONEYPOTS 审中-实审
公开(公告)号：EP4164177A1
公开(公告)日：2023-04-12
申请号：EP22199613.5
申请日：2022-10-04
申请人： Nozomi Networks Sagl
发明人： KLEYMENOV, Alexey , DI PINTO, Alessandro , CARULLO, Moreno , CARCANO, Andrea
IPC分类号： H04L9/40
摘要： The present invention relates to a method for automatic aggregating and enriching data from honeypots comprising defining a plurality of identified honeypots of a different type to be monitored in a network; collecting metadata and samples from said honeypots of a different type in said network, which in turn comprises defining a predefined collection model for the honeypots such as to collect homogeneous metadata and samples among the honeypots of a different type, extracting the metadata according to the collection model defining a model metadata, and extracting the samples according to the collection model defining model samples; enriching said metadata and sample collected, which in turn comprises scanning the model metadata to extract IoCs, scanning the model samples to extract IoCs, recursively scanning the model samples to generate secondary model metadata and scanning the secondary model metadata to extract IoCs, until no further IoCs can be generated, recursively obtaining secondary samples from the extracted IoCs and scanning the secondary model samples to extract IoCs, until no further secondary samples are obtained; and aggregating said metadata and samples collected and/or enriched, which in turn comprises aggregating metadata by a predefined metadata model aggregation and aggregating samples by a predefined samples model aggregation.

IPRDB

热门服务

关于我们

友情链接

联系方式