Title:
METHOD AND APPARATUS FOR ANOMALY-BASED INTRUSION DETECTION IN NETWORK
Document Type and Number:
WIPO Patent Application WO/2013/027970
Kind Code:
A1
Abstract:
Disclosed is an apparatus and method for anomaly-based intrusion detection in a network and a recording medium in which the method is recorded. The method for anomaly-based intrusion detection in a network according to the present invention comprising: setting a critical value for self-similarity by measuring the self-similarity in advance from one or more pieces of attribute information indicating a traffic state of the network in a normal state; measuring a self-similarity value in real time from the one or more pieces of attribute information in the network; and determining whether the network is normal by comparing the measured real-time self-similarity value with the set critical value.
More Like This:
Inventors:
KIM HUY KANG (KR)
KOH PAULINE (KR)
KOH PAULINE (KR)
Application Number:
PCT/KR2012/006549
Publication Date:
February 28, 2013
Filing Date:
August 17, 2012
Export Citation:
Assignee:
UNIV KOREA RES & BUS FOUND (KR)
KIM HUY KANG (KR)
KOH PAULINE (KR)
KIM HUY KANG (KR)
KOH PAULINE (KR)
International Classes:
G05B23/02; H04L12/26; H04L12/22
Foreign References:
US20060067240A1 | 2006-03-30 | |||
US20100150008A1 | 2010-06-17 | |||
US20070206498A1 | 2007-09-06 | |||
US20100135157A1 | 2010-06-03 |
Attorney, Agent or Firm:
CHUNG HYUN PATENT & LAW FIRM (KR)
특허법인 충현 (KR)
특허법인 충현 (KR)
Download PDF:
Claims: