公开(公告)号：US20230025946A1

公开(公告)日：2023-01-26

申请号：US17956591

申请日：2022-09-29

Applicant: Huawei Technologies Co., Ltd.

Inventor： Shiguang Li ,  Mengwen Xu ,  Lijuan Jiao

IPC: H04L9/40 ,  H04L69/22

Abstract: A network attack detection method and apparatus is provided. The network protection device obtains first key data from received first network traffic, and matches the first key data with an attack signature in a signature database to obtain a first matching result; if the network protection device determines, based on the first matching result, that the first network traffic is aggressive, the network protection device obtains a target attack detection model based on the first network traffic, where the target attack detection model is used to identify one or more attack signatures that are different from the attack signature in the signature database; and when the network protection device receives second network traffic, the network protection device determines, based on the target attack detection model, whether the second network traffic is aggressive.