Anomaly Behavior Detection Devices for IoT Environment

摘要

Disclosed is a method and apparatus for responding to an abnormal behavior packet for protecting IoT equipment in a LAN in which an IoT device is used. The method of detecting anomalies includes collecting all the packets in the corresponding LAN from the packet collection device, extracting the data through a pre-processing process, and sending the data to the packet analysis device, and detects and determines the abnormal behavior through pattern-based detection in the packet analysis device. And storing data in the DB according to the step and the result, and blocking communication determined as an abnormal behavior in the packet collection device according to the result.