REAL-TIME NETWORK ATTACK PATTERN DETECTION SYSTEM FOR UNKNOWN NETWORK ATTACK AND METHOD THEREOF

摘要

The present invention relates to a real-time attack pattern detection system and method for the unknown network attacks, worm (Worm) is for a common pattern from the packet network to the suspected attack, such as a real-time attack pattern detection system and method for effectively identify and block the attack in real time. The invention and the suspect packet detector for classification of suspicious attack packet from all packets to be input, and the first data delay unit and outputting a delayed data clock input receives the packet from the packet detector doubt, the first data delay device output from the second delay unit and the data, the data and the second data delay unit output from the input data and the first data output from the delay unit suspect packet detector that receives the clock signal and outputting a delayed data output from the which receives the data and the hash key generator to generate a hash key, and a hash table to store the look-up result by the hash key is generated from the hash key generator, consisting of a look-up result verifier to verify the result of the hash table look-up it features.