ATTACK DEFENSE METHOD FOR PREVENTING CYBERATTACKS ON PACKET DATA, AND DEVICES FOR PERFORMING SAME

摘要

Disclosed are an attack defense method for preventing cyberattacks on packet data, and devices for performing the same. According to an embodiment of the present invention, an attack defense method for preventing cyberattacks on packet data comprises the steps of: receiving a plurality of packet data output from an intrusion prevention system (IPS); clustering the plurality of packet data based on one or more representative feature fields representing the plurality of packet data; and learning rules of the IPS to determine whether the packet data is normal or abnormal based on the clustering result.;COPYRIGHT KIPO 2020