首页>
外国专利>
Enabling network intrusion detection by representing network activity in graphical form utilizing distributed data sensors to detect and transmit activity data
Enabling network intrusion detection by representing network activity in graphical form utilizing distributed data sensors to detect and transmit activity data
展开▼
机译:通过使用分布式数据传感器以图形形式表示网络活动来检测和传输活动数据,从而启用网络入侵检测
展开▼
页面导航
摘要
著录项
相似文献
摘要
A method, system, and computer program product for detecting and mapping activity occurring at and between devices on a computer network for utilization within an intrusion detection mechanism. An enhanced graph matching intrusion detection system (eGMIDS) utility executing on a control server provides data collection functions and data fusion techniques. The eGMIDS comprises multiple sensors and associated unique adaptors that are located at different remote devices of the network and utilized to detect specific types of activity occurring at the respective devices relevant to eGMIDS processing. The sensors convert the data into eGMIDS format and encapsulate the data in a special transmission packet that is transmitted to the control server. The eGMIDS utility converts the activity data within these packets into eGMIDS-usable format and then processes the converted data via a data fusion technique to generate a graphical representation of the network (devices) and the activity occurring at/amongst the various devices.
展开▼