公开(公告)号：US20190327164A1

公开(公告)日：2019-10-24

申请号：US16206662

申请日：2018-11-30

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Jung Tae KIM ,  Youngsoo KIM ,  Jonghyun KIM ,  Hyun Joo KIM ,  Jong Geun PARK ,  Sang-Min LEE ,  Jong-Hoon LEE ,  Sunoh CHOI

IPC: H04L12/26

Abstract: A method, an apparatus, and a system for analyzing traffic through obtaining flow data of a flow from a switch or a router of a network, calculating an average byte per packet rate (BPR) and a TCP flag ratio (TCPFR) for all flows included in a session including the flow using the flow data, and comparing the average BPR and the TCPFR with an average BPR and a TCPFR of previously-known traffic and determining whether the traffic including the flow is normal traffic or abnormal traffic based on the comparison result are provided.

公开(公告)号：US20190394215A1

公开(公告)日：2019-12-26

申请号：US16202869

申请日：2018-11-28

Applicant: Electronics and Telecommunications Research Institute

Inventor： Jong-Hoon LEE ,  Youngsoo KIM ,  Ik Kyun KIM ,  Jung Tae KIM ,  Jonghyun KIM ,  Hyun Joo KIM ,  Jong Geun PARK ,  Sang-Min LEE ,  Sunoh CHOI

IPC: H04L29/06 ,  G06N20/00 ,  G06N3/08

Abstract: A method and a computation apparatus detecting cyber threats using a neural network through steps of: generating a learning model by performing machine learning on training data based on baseline data, converting a security event collected in real time into input data for the neural network, and determining, as an output corresponding to the input data based on the learning model, whether the security event is normal or threat are provided.