公开(公告)号：US20130073700A1

公开(公告)日：2013-03-21

申请号：US13473515

申请日：2012-05-16

申请人： Dae Hee SEO ,  Gae II An ,  Sung Won Yi ,  Ki Young Kim ,  Jong Hyun Kim ,  Sun Hee Lim ,  Dong II Seo

发明人： Dae Hee SEO ,  Gae II An ,  Sung Won Yi ,  Ki Young Kim ,  Jong Hyun Kim ,  Sun Hee Lim ,  Dong II Seo

IPC分类号： G06F15/177

CPC分类号： G06F21/554 ,  G06F2221/2115 ,  G06F2221/2151 ,  H04L63/0428 ,  H04L63/12

摘要： Disclosed are a system for sharing information between heterogeneous service providers, including: a first service provider configured to generate first situation information based on an abnormal situation of a system; a second service provider configured to receive the first situation information from the first service provider, generate second situation information corresponding to the received first situation information; and the TTP configured to receive the first situation information from the first service provider, receive the second situation information from the second service provider, generate correspondence information based on the received information, and share the generated correspondence information.

摘要翻译： 公开了一种用于在异构服务提供商之间共享信息的系统，包括：第一服务提供商，被配置为基于系统的异常情况生成第一情况信息; 第二服务提供器，被配置为从所述第一服务提供商接收所述第一情况信息，生成与所接收的第一情况信息相对应的第二情况信息; 并且所述TTP被配置为从所述第一服务提供商接收所述第一情况信息，从所述第二服务提供商接收所述第二情况信息，基于所接收的信息生成对应信息，并共享所生成的对应信息。

公开(公告)号：US20060137011A1

公开(公告)日：2006-06-22

申请号：US11238300

申请日：2005-09-29

申请人： Myung Kim ,  Hwan Kuk Kim ,  Dong II Seo

发明人： Myung Kim ,  Hwan Kuk Kim ,  Dong II Seo

IPC分类号： G06F12/14

CPC分类号： H04L63/029 ,  H04L63/1416 ,  H04L69/16 ,  H04L69/167

摘要： Provided are a system and method for coping with encrypted harmful traffic in hybrid IPv4/IPv6 networks. The system includes: an encryption key manager collecting encryption key information from a user terminal connected to the hybrid IPv4/IPv6 networks, and storing and managing the information in an encryption key database; an encryption traffic collector collecting encrypted traffic from traffic in the hybrid IPv4/IPv6 networks; an encryption key searcher searching for an encryption key used to decrypt the encrypted traffic from the encryption key database using a source IP address and a destination IP address of the encrypted traffic; a harmful traffic determiner decrypting the encrypted traffic using the encryption key and determining whether the decrypted traffic is harmful traffic; and an encryption traffic processor, if the decrypted traffic is determined to be harmful traffic, blocking the harmful traffic and, if the decrypted traffic is determined to be normal traffic, encrypting the normal traffic, and transferring the encrypted traffic to a user terminal corresponding to the destination IP address, thereby detecting and blocking an attack pattern using the encrypted harmful traffic in hybrid IPv4/IPv6 networks which cannot be detected by a conventional firewall system and more effectively protecting the networks.

摘要翻译： 提供了一种在混合IPv4 / IPv6网络中应对加密有害流量的系统和方法。 该系统包括：加密密钥管理器，从连接到混合IPv4 / IPv6网络的用户终端收集加密密钥信息，以及在加密密钥数据库中存储和管理该信息; 加密流量收集器从混合IPv4 / IPv6网络中的流量收集加密流量; 加密密钥搜索器，使用加密流量的源IP地址和目的地IP地址，从加密密钥数据库中搜索用于解密加密流量的加密密钥; 有害的流量确定器使用加密密钥解密加密的流量，并确定解密的流量是否是有害的流量; 以及加密流量处理器，如果解密的流量被确定为有害流量，则阻止有害流量，并且如果解密的流量被确定为正常流量，则对正常流量进行加密，并将加密的流量传送到对应于 目的地IP地址，从而通过传统防火墙系统无法检测的混合IPv4 / IPv6网络中的加密有害流量来检测和阻止攻击格式，更有效地保护网络。