Method and system for network security situation assessment
AssigneeAjou University Industry-Academic Cooperation Foundation
InventorsJin KWAK, Deuk Hun KIM, Lelisa Adeba JILCA
Life of this patent
Estimating the term…
Abstract
A network security situation assessment method of a network system includes: obtaining network traffic of the network system; detecting an attack on the network system from the obtained network traffic; identifying the detected attack; analyzing a possibility of an attack and an impact of an attack on the network system based on results of the detecting and identifying of the attack; and assessing a network situation of the network system based on a result of the analyzing, wherein the detecting of the attack on the network system includes detecting the attack from the network traffic using deep learning-based first model and second model.
Claims17
A network security situation assessment method of a network system, the network security situation assessment method comprising:
- obtaining network traffic of the network system;
- detecting an attack on the network system from the obtained network traffic;
- identifying the detected attack;
- analyzing a possibility of an attack and an impact of an attack on the network system based on results of the detecting and identifying of the attack;
- and
- assessing a network situation of the network system based on a result of the analyzing,
- wherein the detecting of the attack on the network system comprises:
- detecting the attack from the network traffic using deep learning-based first model and second model.
A network security situation assessment system of a network system, the network security situation assessment system comprising:
- a situation extraction unit configured to detect and identify an attack from network traffic of the network system;
- a situation analysis unit configured to analyze a possibility of an attack and an impact of an attack on the network system based on results of the detecting and identifying of the attack;
- and
- a situation assessment unit configured to assess a network situation of the network system based on a result of the analyzing,
- wherein the situation extraction unit comprises an attack detection unit configured to detect an attack from the network traffic, and
- the attack detection unit comprises a first model and a second model based on deep learning.
Dependencies are inferred from the claim text.