METHOD FOR DETECTING UNAUTHORIZED PORT SCANNING IN A COMPUTER NETWORK, ASSOCIATED COMPUTER PROGRAM PRODUCT AND DEVICE

摘要

The network is constituted by a plurality of terminals, each defining a plurality of ports, each terminal being associated with an identifier of the terminal, each being associated with an identifier worn. At least some of the terminals, said terminals initiators are able to initiate a connection with another terminal, called a receiver terminal, via at least one port of the receiver terminal. The process (100) comprises the following steps: : - the detection (110) of each connection initiated by a terminal initiator ; - the identification (120) of connections discharged from the set of connections initiated ; - for each connection rejected, the generation (130) of a security information comprising the identifiers of the receiver terminal, and one of its ports, and the addition (140) of the security information in a shared base ; - analysis (150) of the base in order to determine the scans of ports not - authorised.