Title:
A cyber assault detection device and a method based on event analysis
Document Type and Number:
Japanese Patent JP5970041
Kind Code:
B2
Abstract:
There are provided a device for detecting a cyber attack and a method thereof. The device for detecting a cyber attack includes an event receiving unit configured to receive an event generated in at least one user terminal according to a behavior of a user who accesses a web server and uses web services provided from a web page, a model generating unit configured to generate an event model by extracting an event pattern corresponding to a behavior of the user based on the received event, and an attack detecting unit configured to detect whether access of the web server by a specific user terminal is an attack by comparing the event model with an event received from the specific user terminal. Therefore, various forms of cyber attacks are rapidly and accurately detected, and it is possible to provide a security service having high availability and reliability.
Inventors:
Risoku
Sim Sangyu
KIM, Deog Soo
Sim Sangyu
KIM, Deog Soo
Application Number:
JP2014211238A
Publication Date:
August 17, 2016
Filing Date:
October 15, 2014
Export Citation:
Assignee:
Penta Security Systems Incorporated
International Classes:
G06F13/00; G06F21/55; H04L12/66
Domestic Patent References:
| JP2012527691A |
Foreign References:
| US20110185421 |
Other References:
山田明,三宅優,竹森敬祐,SSLで暗号化されたWeb通信に対する侵入検知 Intrusion Detection for Encrypted Web Traffic,電子情報通信学会技術研究報告 Vol.106 No.174 IEICE Technical Report,日本,社団法人電子情報通信学会,2006年 7月13日,第106巻,p.167-p.173
Attorney, Agent or Firm:
Iseki Katsumori
Shuhei Kaneko
Shuhei Kaneko
Previous Patent: A temperature control system and a temperature control method
Next Patent: METHOD FOR MEASURING TRANSMISSION QUALITY OF DATA
Next Patent: METHOD FOR MEASURING TRANSMISSION QUALITY OF DATA