Loading patent…
AssigneeAgency for Defense Development
InventorsIl-Hoon Jeong, Hwa-Seong Lee, Chang-Hee Choi, Ho-Sang Yun
Estimating the term…
An attack tracking system includes multiple hosts in which first event data concerning object behavior are collected and pieces of host-based event information are created therefrom; a tracking information database server storing the pieces of host-based event information; a tracking information analysis server creating behavior events by defining malware behavior from the pieces of host-based event information, retrieving targets to be analyzed from the pieces of host-based event information and the behavior events based on a preset input value, creating first tracking contexts for identifying the malware behavior by analyzing the relationship between the pieces of host-based event information and the relationship between a set of the pieces of host-based event information and a set of the behavior events, and creating second tracking contexts tracking malware routes and behavior events between the multiple hosts by analyzing the correlation between the first tracking contexts.
A system for tracking a malware route and behavior in order to defend against cyberattacks, comprising:
A method for tracking a malware route and behavior in order to defend against cyberattacks, comprising:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
From the US filing history. Foreign family members aren’t listed.
No references of this kind are recorded.
By monitoring network traffic: event detection, e.g. attack signature detection
Countermeasures against malicious traffic: the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00: tracing the…
Digital communication
About 10 years 5 months of term left · ends 5 Apr 2037 (estimated)
This application claims the benefit of priority to Korean Patent Application No. 10-2016-0078563 filed on Jun. 23, 2016, the entire contents of which are incorporated herein by reference.
1. Technical Field
The present invention relates generally to technology for defending against cyberattacks and, more particularly, to an attack tracking system and method in which information about intrusions using malware is automatically collected and analyzed, whereby malware routes and behavior are tracked.
The above and other objects, features and advantages of the present invention will be more clearly understood from the following detailed description taken in conjunction with the accompanying drawings, in which:
FIG. 1 is a block diagram illustrating an attack tracking system for automatically tracking a malware route and behavior in order to defend against cyberattacks according to an embodiment of the present invention;
FIG. 2 is a block diagram that shows the configuration of the tracking information collection module illustrated in FIG. 1;
The present invention may be variously changed, and may have various embodiments, and specific embodiments will be described in detail below with reference to the attached drawings. However, it should be understood that those embodiments are not intended to limit the present invention to specific disclosure forms and that they include all changes, equivalents or modifications included in the spirit and scope of the present invention.
The same reference numerals are used to designate the same or similar elements throughout the drawings.
Terms such as “first”, “second”, and the like may be used to describe various elements, but the elements should not be limited by the terms. The terms are used only to distinguish one element from another element.