公开(公告)号：US20090106839A1

公开(公告)日：2009-04-23

申请号：US11941215

申请日：2007-11-16

申请人： Myeong-Seok Cha ,  Won-Tae Sim ,  Woo-Han Kim

发明人： Myeong-Seok Cha ,  Won-Tae Sim ,  Woo-Han Kim

IPC分类号： G06F21/00

CPC分类号： H04L63/1425 ,  G06F21/552 ,  G06F2221/2151 ,  H04L63/1416

摘要： Method for detecting network attack based on time series model using the trend filtering. The method has the steps of: a) removing a trend component from the time series data to extract a residual component; and b) detecting an anomaly by applying a time series model to the residual component.

摘要翻译： 基于时间序列模型的网络攻击检测方法。 该方法具有以下步骤：a）从时间序列数据中去除趋势分量以提取残余分量; 以及b）通过对残余分量应用时间序列模型来检测异常。

公开(公告)号：US20080095187A1

公开(公告)日：2008-04-24

申请号：US11553253

申请日：2006-10-26

申请人： Tae In JUNG ,  Myeong-Seok Cha ,  Hyung-Jong Kim ,  Won Tae Sim ,  Woo-Han Kim

发明人： Tae In JUNG ,  Myeong-Seok Cha ,  Hyung-Jong Kim ,  Won Tae Sim ,  Woo-Han Kim

IPC分类号： H04J3/22

CPC分类号： H04L43/0882 ,  H04L41/0896 ,  H04L43/10 ,  H04L43/106 ,  H04L69/28

摘要： Disclosed is a method for estimating an available bandwidth of a network link by transmitting small-sized probing packets using a time stamp function of an Internet control message protocol (ICMP) and using time information of the probing packet returned. According to the invention, even when the separate program or function is not activated in the router, it is possible to easily estimate and monitor the available bandwidth of the exterior network link connected to the network being managed. Accordingly, it is possible to operate the network more stably and to detect the abnormal sign of the network at early stage, thereby quickly coping with it. In addition, it is possible to prevent the excessive traffic or load from being caused in the network.

摘要翻译： 公开了一种通过使用因特网控制消息协议（ICMP）的时间戳功能并使用返回的探测分组的时间信息来发送小型探测分组来估计网络链路的可用带宽的方法。 根据本发明，即使在路由器中没有激活单独的程序或功能的情况下，也可以容易地估计和监视连接到被管理的网络的外部网络链路的可用带宽。 因此，可以更稳定地操作网络，并且能够早期检测网络的异常信号，从而快速应对网络。 另外，可以防止在网络中引起过多的流量或负载。