Network attack detection method
AssigneesThe Hong Kong Polytechnic University, Tencent Technology (Shenzhen) Company Limited
InventorsLei Xue, Zhiwei Liu, Xianneng Zou, Jingang Hou, Xiapu Luo, Edmond W. W Chan, Pei Tu, Yuru Shao
Life of this patent
Estimating the term…
Abstract
It is described a network attack detection method. A topology analysis on network is conducted to obtain a probing path set containing at least one probing path. A first probing path contained in the probing path set is probed by using a probing pattern to obtain a performance metric of the first probing path. It is determined whether the first probing path is subjected to network attack according to the performance metric and a control performance metric.
Claims20
A method, comprising:
- at an electronic device having one or more processors, and a memory for storing program instructions that are executed by the one or more processors,
- conducting a topology analysis on network, and obtaining a probing path set containing at least one probing path according to the topology analysis;
- probing a first probing path contained in the probing path set by using a probing pattern and obtaining a performance metric of the first probing path;
- and
- determining whether the first probing path is subjected to network attack according to the performance metric and a control performance metric,
- wherein one end of the probing path is a probing node and another end of the probing path is a target node, a forward path of the probing path is from the probing node to the target node and a reverse path of the probing path is from the target node to the probing node.
A non-transitory computer-readable storage medium storing instructions thereon for execution by at least one processing circuit, the instructions comprising:
- conducting a topology analysis on network, and obtaining a probing path set containing at least one probing path according to the topology analysis;
- probing a first probing path contained in the probing path set by using a probing pattern and obtaining a performance metric of the first probing path;
- and
- determining whether the first probing path is subjected to network attack according to the performance metric and a control performance metric,
- wherein one end of the probing path is a probing node and another end of the probing path is a target node, a forward path of the probing path is from the probing node to the target node and a reverse path of the probing path is from the target node to the probing node.
An apparatus, comprising:
- one or more processors;
- a memory coupled to the one or more processors;
- and
- instructions stored in the memory, the instructions being executable by the one or more processors to:
- conduct a topology analysis on network, and obtain a probing path set containing at least one probing path according to the topology analysis;
- probe a first probing path contained in the probing path set by using a probing pattern and obtain a performance metric of the first probing path;
- and
- determine whether the first probing path is subjected to network attack according to the performance metric and a control performance metric,
- wherein one end of the probing path is a probing node and another end of the probing path is a target node, a forward path of the probing path is from the probing node to the target node and a reverse path of the probing path is from the target node to the probing node.
Dependencies are inferred from the claim text.