首页>
外国专利>
PROCÉDÉ ET SYSTÈME DE DÉTECTION DE COMPORTEMENT DE MAÎTRE DE RÉSEAU DE ZOMBIES
PROCÉDÉ ET SYSTÈME DE DÉTECTION DE COMPORTEMENT DE MAÎTRE DE RÉSEAU DE ZOMBIES
展开▼
展开▼
页面导航
摘要
著录项
相似文献
摘要
A bot detection engine to determine whether hosts in an organization's network are performing bot-related activities is disclosed. A bot detection engine can receive network traffic between hosts in a network, and/or between hosts across several networks. The bot engine may parse the network traffic into session datasets and discard the session datasets that were not initiated by hosts in a given network. The session datasets may be analyzed and state data may be accumulated. The state data may correspond to actions performed by the hosts, such as requesting a website or clicking ads, or requesting content within the website (e.g. clicking on a image which forms a HTTP request/response transaction for the image file).
展开▼