METHOD FOR REALTIME INVASION DETECTION USING AGENT STRUCTURE IN REALTIME INVASION DETECTION SYSTEM

摘要

PURPOSE: A method for realtime invasion detection using an agent structure in a realtime invasion detection system is provided to perform a realtime process for a detected pattern by using an agent. CONSTITUTION: A method for realtime invasion detection using an agent structure in a realtime invasion detection system comprises the following steps. An agent detects a pattern corresponding to an event input in an invasion pattern database by receiving inspection data or a packet from an outside. The agent determines the pattern as the invasion by confirming a related agent if there is a matched pattern. A monitor determines the pattern as the invasion by using the invasion pattern database.