公开(公告)号：US20160226894A1

公开(公告)日：2016-08-04

申请号：US14996505

申请日：2016-01-15

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Han Sung LEE ,  Ig Kyun KIM ,  Dae Sung MOON ,  Min Ho HAN

IPC: H04L29/06 ,  G06N99/00

CPC classification number: H04L63/1416 ,  G06F21/552 ,  G06N20/00 ,  H04L63/1425

Abstract: Disclosed are a method and system, capable of performing adaptive intrusion detection proactively coping with a new type of attack unknown to the system and capable of training an intrusion type classification model by using a small volume of training data, the system including a data collector configured to collect host and network log information, an input data preprocessor configured to convert data acquired through the data collector into a feature vector, which is an input type of intelligence intrusion detection, and an intelligence intrusion detection analyzer configured to perform an intrusion detection and a model update by using the extracted feature vector, and an intrusion detection learning model configured to detect an intrusion and learn classification of the type of attack based on training data.

Abstract translation: 公开了一种方法和系统，其能够主动地执行自适应入侵检测，以处理系统未知的新型攻击，并且能够通过使用小量的训练数据来训练入侵型分类模型，所述系统包括配置的数据收集器 收集主机和网络日志信息;输入数据预处理器，被配置为将通过数据收集器获取的数据转换成作为智能入侵检测的输入类型的特征向量;以及智能入侵检测分析器，被配置为执行入侵检测和 通过使用提取的特征向量进行模型更新，以及入侵检测学习模型，其被配置为基于训练数据来检测入侵类型和学习类型的分类。

公开(公告)号：US20160232345A1

公开(公告)日：2016-08-11

申请号：US15017504

申请日：2016-02-05

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Dae Sung MOON ,  Ik Kyun KIM ,  Han Sung LEE

IPC: G06F21/55 ,  G06F21/52

CPC classification number: G06F21/566

Abstract: A computing device configured to execute an instruction set is provided. The computing device includes a system call hooker for hooking system calls that occur by the instruction set while the instruction set is executed, a category extractor for extracting a category to which each of the hooked system calls belongs with reference to category information associated with a correspondence relationship between a system call and a category, a sequence extractor for extracting one or more behavior sequences expressed in an N-gram manner from a full sequence of the hooked system calls with reference to the extracted category, and a model generator for generating a behavior pattern model of the system calls that occur when the instruction set is executed, based on a number of times that each of the extracted behavior sequences occurs.

Abstract translation: 提供了一种被配置为执行指令集的计算设备。 计算装置包括用于在指令集执行时由指令集进行的挂钩系统调用的系统呼叫连接器，用于提取每个挂钩系统呼叫所属类别的类别提取器参考与对应关系相关联的类别信息 系统调用与类别之间的关系，序列提取器，用于从涉及所提取的类别的挂接系统调用的完整序列中提取以N-格式表示的一个或多个行为序列，以及用于生成行为的模型生成器 基于每个提取的行为序列发生的次数，执行指令集时发生的系统调用的模式模型。

公开(公告)号：US20140178030A1

公开(公告)日：2014-06-26

申请号：US13921928

申请日：2013-06-19

Applicant: Electronics and Telecommunications Research Institute

Inventor： Dae Sung MOON ,  Han Sung LEE ,  Jin Woo CHOI ,  Ki Young MOON ,  Jang Hee YOO

IPC: H04N5/77

CPC classification number: H04N5/772

Abstract: Disclosed is a video recording apparatus for a vehicle, which includes a camera unit formed so as to change a capturing direction; a driver's viewing direction detecting unit configured to detect a driver's viewing direction; a control unit configured to control the camera unit so that the detected viewing direction corresponds to the capturing direction; and a storing unit configured to store a video obtained by the camera unit. Therefore, a video in a direction at which the driver views is obtained and stored without mounting a plurality of cameras so that it is possible to obtain a video for a situation of an accident of a vehicle of the driver or a vehicle of another driver occurring not only in the front of the driver's vehicle but also in the side of the driver's vehicle.

Abstract translation: 公开了一种用于车辆的视频记录装置，其包括形成为改变拍摄方向的相机单元; 驱动器的观察方向检测单元，被配置为检测驾驶员的观察方向; 控制单元，被配置为控制所述相机单元，使得所检测的观看方向对应于所述拍摄方向; 以及存储单元，被配置为存储由所述相机单元获得的视频。 因此，在没有安装多个照相机的情况下获取和存储驾驶员观看的方向的视频，使得可以获得用于驾驶员的车辆的事故或另一驾驶员的车辆的事故的视频 不仅在司机的前方，而且在司机的一侧。