Method for detecting malicious behavior in a communication network, device, equipment for accessing said network, method for detecting a distributed attack in said network, device, node equipment and corresponding computer programs

摘要

Method for detecting malicious behavior in a communication network, device, equipment for accessing said network, method for detecting a distributed attack in said network, device, node equipment, system, data file and computer programs Correspondents The invention relates to a method for detecting malicious behavior on the part of a communicating object connected to a remote telecommunications network by means of a local telecommunications network managed by equipment for accessing said telecommunications network. remote, said method being implemented by a local agent connected to the local telecommunications network, said method comprising: - obtaining (31) by the access equipment information representative of a sequence of dated network events , occurred within a predetermined time window; - Detecting malicious behavior by matching (33) information obtained with a signature, among a plurality of malicious behavior signatures, stored in at least one signature table; and- the decision (34) to initiate at least one action to protect the local telecommunications network and / or the remote telecommunications network against the detected malicious behavior. Fig. 3