会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 1. 发明申请
    • APPARATUS AND METHOD FOR ATTACK SOURCE TRACEBACK
    • 攻击源跟踪的装置和方法
    • US20150150133A1
    • 2015-05-28
    • US14518623
    • 2014-10-20
    • Electronics and Telecommunications Research Institute
    • Min-Ho HANJung-Tae KIMIk-Kyun KIMHyun-Sook CHO
    • H04L29/06
    • H04L63/1416H04L63/1466H04L63/164
    • An apparatus and a method for an attack source traceback capable of tracing back an attacker, that is, an attack source present behind a command and control (C&C) server in a cyber target attack having non-connectivity over a transmission control protocol (TCP) connection are disclosed. The apparatus for the attack source traceback includes: a server information extracting unit detecting an attack for a system, which is generated via a server to thereby extract information on the server; a traceback agent installing unit installing a traceback agent in the server based on the information on the server; and a traceback unit finding an attack source for the system by analyzing network information of the server obtained by the traceback agent.
    • 一种用于跟踪攻击者的攻击源追溯的装置和方法,即在具有通过传输控制协议(TCP)上的非连接性的网络目标攻击中的命令和控制(C&C)服务器后面的攻击源, 连接被公开。 用于攻击源追溯的装置包括:服务器信息提取单元,其检测经由服务器生成的系统的攻击,从而在服务器上提取信息; 追溯代理安装单元,基于服务器上的信息在服务器中安装回溯代理; 追溯单元通过分析由追溯代理获得的服务器的网络信息来查找系统的攻击源。