首页>
外国专利>
System and method for detecting abnormal traffic based on early notification
System and method for detecting abnormal traffic based on early notification
展开▼
机译:基于早期通知的异常流量检测系统及方法
展开▼
页面导航
摘要
著录项
相似文献
摘要
This method and system for detecting abnormal traffic in a communications network is based on classifying the traffic in risk and status categories and maintaining a service status table with this information for each service at a respective node. The risk categories are initially established based on known software vulnerabilities recognized for the respective service. An early notifier enables further processing of services suspected of malware propagation. Status categories enable segregating the traffic with a “under attack status” from the “non under attack” status, so that the intrusion detection system at the respective node only processes the “under attack” traffic. In this way, the time and amount of processing performed by the intrusion detection system is considerably reduced.
展开▼