首页>
外国专利>
Apparatus, Method and Medium for Detecting Payload Anomaly using N-Gram Distribution of Normal Data
Apparatus, Method and Medium for Detecting Payload Anomaly using N-Gram Distribution of Normal Data
展开▼
机译:利用正态数据的N-Gram分布检测有效载荷异常的装置,方法和介质
展开▼
页面导航
摘要
著录项
相似文献
摘要
A method, apparatus and medium are provided for detecting anomalous payloads transmitted through a network. The system receives payloads within the network and determines a length for data contained in each payload. A statistical distribution is generated for data contained in each payload received within the network, and compared to a selected model distribution representative of normal payloads transmitted through the network. The model payload can be selected such that it has a predetermined length range that encompasses the length for data contained in the received payload. Anomalous payloads are then identified based on differences detected between the statistical distribution of received payloads and the model distribution. The system can also provide for automatic training and incremental updating of models.
展开▼