利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

21 条记录 (耗时 0.015 秒)

    System for an engine for forecasting cyber threats and method for forecasting cyber threats using the system
    1.
    发明授权
    System for an engine for forecasting cyber threats and method for forecasting cyber threats using the system 有权
    用于预测网络威胁的引擎系统以及使用该系统预测网络威胁的方法

    公开(公告)号：US08800037B2

    公开(公告)日：2014-08-05

    申请号：US13320263

    申请日：2010-06-22

    申请人： Seung Hyun Paek ,  In Sung Park ,  Eun Young Lee ,  Joo Beom Yun ,  Ki Wook Sohn ,  Seok Jin Choi

    发明人： Seung Hyun Paek ,  In Sung Park ,  Eun Young Lee ,  Joo Beom Yun ,  Ki Wook Sohn ,  Seok Jin Choi

    IPC分类号： G06F11/00 ,  H04L29/06 ,  G06F21/55 ,  G06F21/57

    CPC分类号： G06F21/577 ,  G06F21/552 ,  G06F2221/0775 ,  G06F2221/2129 ,  G06F2221/2145 ,  G06F2221/2151 ,  H04L63/1416

    摘要： A system for an engine for forecasting cyber threats and a method enabling the forecast of a low-level cyber threat and the forecast of a high-level cyber threat using the low-level cyber threat in a hierarchical structure of cyber threats are provided. The system includes a forecast information database which stores forecast information including cyber threat forecast items, a forecast schedule related to the items, forecast simulation information, forecast item hierarchical structure information, time series data on cyber threats, and sample data on cyber threats; a forecast engine core subsystem which forecasts the levels of threats for the cyber threat forecast items having a hierarchical structure using the forecast information stored in the forecast information database; and a forecast engine control interface which receives control commands for the forecast engine core subsystem from a user or external system, and delivers the received control commands to the forecast engine core subsystem.

    摘要翻译： 提供了一种用于预测网络威胁的引擎系统，并提供了一种能够预测低级网络威胁的方法，并使用网络威胁分层结构中的低级网络威胁来预测高级网络威胁。 该系统包括一个预测信息数据库，存储预测信息，包括网络威胁预测项目，与项目有关的预测进度，预测模拟信息，预测项目分层结构信息，网络威胁时间序列数据和网络威胁示例数据; 预测引擎核心子系统，使用存储在预测信息数据库中的预测信息来预测具有分级结构的网络威胁预测项目的威胁级别; 以及预测引擎控制接口，其从用户或外部系统接收用于预测引擎核心子系统的控制命令，并将接收的控制命令传递到预测引擎核心子系统。

    System and method for predicting cyber threat
    2.
    发明授权
    System and method for predicting cyber threat 有权
    用于预测网络威胁的系统和方法

    公开(公告)号：US08191149B2

    公开(公告)日：2012-05-29

    申请号：US11938356

    申请日：2007-11-12

    申请人： Joo Beom Yun ,  Seung Hyun Paek ,  In Sung Park ,  Eun Young Lee ,  Hyung Geun Oh ,  Do Hoon Lee

    发明人： Joo Beom Yun ,  Seung Hyun Paek ,  In Sung Park ,  Eun Young Lee ,  Hyung Geun Oh ,  Do Hoon Lee

    IPC分类号： G06F12/14

    CPC分类号： H04L63/145 ,  G06F21/552

    摘要： Provided are a system and method for predicting a cyber threat. The system and method collect various variables and synthetically predict the frequency, dangerousness, possibility, and time of the occurrence of a cyber threat including hacking, a worm/virus, a Denial of Service (DoS) attack, illegal system access, a malicious code, a social engineering attack, system/data falsification, cyber terror/war, weakness exploitation, etc., using a time-series analysis method and a Delphi method, and inform a user in advance of the prediction result, thereby enabling the user to prepare against the cyber threat.

    摘要翻译： 提供了一种用于预测网络威胁的系统和方法。 系统和方法收集各种变量，综合预测网络威胁发生的频率，危险性，可能性和时间，包括黑客，蠕虫/病毒，拒绝服务（DoS）攻击，非法系统访问，恶意代码 使用时间序列分析方法和德尔菲法进行社会工程攻击，系统/数据伪造，网络恐怖/战争，弱势利用等，并提前通知用户预测结果，从而使用户能够 准备反对网络威胁。

    APPARATUS AND METHOD FOR DETECTING ANOMALOUS TRAFFIC
    7.
    发明申请
    APPARATUS AND METHOD FOR DETECTING ANOMALOUS TRAFFIC 有权
    用于检测异常交通的装置和方法

    公开(公告)号：US20090138590A1

    公开(公告)日：2009-05-28

    申请号：US12103266

    申请日：2008-04-15

    申请人： Eun Young LEE ,  Seung Hyun PAEK ,  In Sung PARK ,  Joo Beom YUN ,  Ki Wook SOHN

    发明人： Eun Young LEE ,  Seung Hyun PAEK ,  In Sung PARK ,  Joo Beom YUN ,  Ki Wook SOHN

    IPC分类号： G06F15/173

    CPC分类号： H04L63/1425 ,  H04L43/045

    摘要： An apparatus and method for detecting anomalous traffic are provided. More particularly, an apparatus and method for detecting anomalous traffic based on entropy of network traffic are provided. The apparatus of detecting anomalous traffic includes: an entropy extraction module for extracting entropy from network traffic; a visualization module for generating an entropy graph based on the entropy; a graph model experience module for updating a graph model for each network attack based on the entropy graph; and an anomalous traffic detection module for detecting anomalous traffic based on the entropy graph and the graph model for each network attack and outputting the detection results to a user. In the apparatus and method, anomalous traffic is detected based on network entropy rather than simple statistics based on the amount of traffic, so that a false alarm rate of the apparatus for detecting anomalous traffic can be reduced.

    摘要翻译： 提供了一种用于检测异常流量的装置和方法。 更具体地，提供了一种用于基于网络流量熵来检测异常业务的装置和方法。 检测异常流量的装置包括：熵抽取模块，用于从网络流量提取熵; 用于基于所述熵产生熵图的可视化模块; 用于基于熵图更新每个网络攻击的图形模型的图形模型体验模块; 以及用于根据每个网络攻击的熵图和图形模型检测异常流量的异常流量检测模块，并将检测结果输出给用户。 在装置和方法中，基于网络熵而不是基于业务量的简单统计来检测异常业务，从而可以减少用于检测异常业务的装置的误报率。

    Apparatus and method for forecasting security threat level of network
    9.
    发明授权
    Apparatus and method for forecasting security threat level of network 有权
    用于预测网络安全威胁等级的装置和方法

    公开(公告)号：US08839440B2

    公开(公告)日：2014-09-16

    申请号：US12103069

    申请日：2008-04-15

    申请人： JooBeom Yun ,  Seung-Hyun Paek ,  InSung Park ,  Eun Young Lee ,  Ki Wook Sohn

    发明人： JooBeom Yun ,  Seung-Hyun Paek ,  InSung Park ,  Eun Young Lee ,  Ki Wook Sohn

    IPC分类号： G06F21/00

    CPC分类号： H04L63/1433 ,  G06F21/577

    摘要： Provided are an apparatus and method for forecasting the security threat level of a network. The apparatus includes: a security data collection unit for collecting traffic data and intrusion detection data transmitted from an external network to a managed network; a malicious code data collection unit for collecting malicious code data transmitted from a security enterprise network; a time series data transformation unit for transforming the data collected by the security data collection unit into time series data; a network traffic analysis unit for analyzing traffic distribution of the managed network using the data collected by the security data collection unit; and a security forecast engine for forecasting security data of the managed network using the time series data obtained by the time data transformation unit, the data analyzed by the network traffic analysis unit, and the data collected by the malicious code data collection unit.

    摘要翻译： 提供了一种用于预测网络的安全威胁级别的装置和方法。 该装置包括：安全数据收集单元，用于收集从外部网络发送到被管理网络的流量数据和入侵检测数据; 用于收集从安全企业网络发送的恶意代码数据的恶意代码数据收集单元; 时间序列数据变换单元，用于将由安全数据收集单元收集的数据变换为时间序列数据; 网络流量分析单元，用于使用由所述安全数据收集单元收集的数据来分析所述被管理网络的流量分布; 以及用于使用由时间数据变换单元获得的时间序列数据，由网络流量分析单元分析的数据和由恶意代码数据收集单元收集的数据来预测托管网络的安全数据的安全预测引擎。

    System and method of detecting anomaly malicious code by using process behavior prediction technique
    10.
    发明授权
    System and method of detecting anomaly malicious code by using process behavior prediction technique 有权
    使用过程行为预测技术检测异常恶意代码的系统和方法

    公开(公告)号：US08181248B2

    公开(公告)日：2012-05-15

    申请号：US11944268

    申请日：2007-11-21

    申请人： HyungGeun Oh ,  Seung-Hyun Paek ,  Cheolho Lee ,  DoHoon Lee

    发明人： HyungGeun Oh ,  Seung-Hyun Paek ,  Cheolho Lee ,  DoHoon Lee

    IPC分类号： G08B23/00 ,  H04L29/06 ,  H04L9/32 ,  G06F12/14 ,  G06F15/173

    CPC分类号： G06F21/552 ,  G06F21/56

    摘要： Provided are a pattern analyzing/detecting method and a system using the same that are capable of detecting and effectively preventing an unknown malicious code attack. To detect such an attack, the method monitors the system to combine all behaviors exhibited within the system due to corresponding malicious codes, reprocess and learn the behaviors, analyze existing malicious behavior feature values (prediction patterns), and compare them with a behavior pattern exhibited by an execution code.

    摘要翻译： 提供了一种模式分析/检测方法和使用该模式分析/检测方法的系统，其能够检测并有效地防止未知的恶意代码攻击。 为了检测这种攻击，该方法监控系统由于相应的恶意代码，重新处理和学习行为，分析现有的恶意行为特征值（预测模式），并将其与展示的行为模式进行比较，结合系统内展现的所有行为 通过执行代码。