SYSTEM AND METHOD FOR TRACKING CYBER-ATTACK HISTORY BASED ON SCENARIO

摘要

A system for tracking a cyber-attack history based on a scenario includes: a scenario performance device (10) consisting of an attack event receiving unit (13) which receives an attack event, a multi-stages attack analyzing unit (15) which tracks cyber-attack by using a previous event for the received attack event, and an attack event visualizing unit (17) which visualizes cyber-attack history tracking. Traffic analysis information based on an event log, a system log, and a network packet generated in various solutions is analyzed and stored as an attack event after a special attack is identified, and multi-stages attack analysis based on the scenario is performed by using the stored attack event when there is the attack event.;COPYRIGHT KIPO 2017