首页> 外国专利> BOTNET GROUP DETECTING SYSTEM USING GROUP BEHAVIOR MATRIX BASED ON NETWORK AND BOTNET GROUP DETECTING METHOD USING GROUP BEHAVIOR MATRIX BASED ON NETWORK

BOTNET GROUP DETECTING SYSTEM USING GROUP BEHAVIOR MATRIX BASED ON NETWORK AND BOTNET GROUP DETECTING METHOD USING GROUP BEHAVIOR MATRIX BASED ON NETWORK

机译:基于网络的群行为矩阵的Botnet群检测系统和基于网络的群行为矩阵的Botnet群检测方法

摘要

The present invention relates to a botnet group detection system using a network-based group behavior matrix and a botnet group detection method using a network-based group behavior matrix. The present invention relates to a set of clients having the same destination based on a destination IP / Port. The present invention relates to a botnet group detection system using a network-based group behavior matrix based on the similarity between groups of collected traffic, and a botnet group detection method using a network-based group behavior matrix. The present invention provides a group information management function for generating a group matrix based on group data and a network-based group behavior matrix capable of detecting botnet groups through mutual similarity analysis for groups suspected of botnets among group information. It can provide a botnet group detection system using botnet group detection system and a botnet group detection method using a network-based group behavior matrix.;Botnet, detection, network, traffic, activity, pattern, group, matrix
机译:本发明涉及使用基于网络的组行为矩阵的僵尸网络组检测系统和使用基于网络的组行为矩阵的僵尸网络组检测方法。本发明涉及基于目的地IP /端口具有相同目的地的一组客户端。僵尸网络组检测系统技术领域本发明涉及基于收集到的通信量的组之间的相似度,使用基于网络的组行为矩阵的僵尸网络组检测系统,以及使用基于网络的组行为矩阵的僵尸网络组检测方法。本发明提供了一种组信息管理功能,该组信息管理功能用于基于组数据生成组矩阵,以及基于网络的组行为矩阵,该组矩阵能够通过对组信息中怀疑有僵尸网络的组进行相互相似性分析来检测僵尸网络组。它可以提供使用僵尸网络组检测系统的僵尸网络组检测系统和使用基于网络的组行为矩阵的僵尸网络组检测方法。僵尸网络,检测,网络,流量,活动,模式,组,矩阵

著录项

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号