PL2353272T3 - Sposób charakteryzowania jednostek przy powstawaniu zmian ruchu sieciowego - Google Patents

Sposób charakteryzowania jednostek przy powstawaniu zmian ruchu sieciowego

Info

Publication number
PL2353272T3
PL2353272T3 PL09753148T PL09753148T PL2353272T3 PL 2353272 T3 PL2353272 T3 PL 2353272T3 PL 09753148 T PL09753148 T PL 09753148T PL 09753148 T PL09753148 T PL 09753148T PL 2353272 T3 PL2353272 T3 PL 2353272T3
Authority
PL
Poland
Prior art keywords
characterising
fluctuations
entities
origin
network traffic
Prior art date
Application number
PL09753148T
Other languages
English (en)
Inventor
Franck Veysset
Pierre Ansel
Original Assignee
Orange
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Orange filed Critical Orange
Publication of PL2353272T3 publication Critical patent/PL2353272T3/pl

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/04—Processing captured monitoring data, e.g. for logfile generation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425—Traffic logging, e.g. anomaly detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/144—Detection or countermeasures against botnets

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Theoretical Computer Science (AREA)
  • Computing Systems (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Data Mining & Analysis (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
PL09753148T 2008-09-30 2009-09-28 Sposób charakteryzowania jednostek przy powstawaniu zmian ruchu sieciowego PL2353272T3 (pl)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
FR0856580 2008-09-30
PCT/FR2009/051831 WO2010037955A1 (fr) 2008-09-30 2009-09-28 Procede de caracterisation d'entites a l'origine de variations dans un trafic reseau
EP09753148.7A EP2353272B1 (fr) 2008-09-30 2009-09-28 Procede de caracterisation d'entites a l'origine de variations dans un trafic reseau

Publications (1)

Publication Number Publication Date
PL2353272T3 true PL2353272T3 (pl) 2014-11-28

Family

ID=40801884

Family Applications (1)

Application Number Title Priority Date Filing Date
PL09753148T PL2353272T3 (pl) 2008-09-30 2009-09-28 Sposób charakteryzowania jednostek przy powstawaniu zmian ruchu sieciowego

Country Status (4)

Country Link
EP (1) EP2353272B1 (pl)
ES (1) ES2496982T3 (pl)
PL (1) PL2353272T3 (pl)
WO (1) WO2010037955A1 (pl)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101741862B (zh) * 2010-01-22 2012-07-18 西安交通大学 基于数据包序列特征的irc僵尸网络检测系统和检测方法
US8799456B2 (en) * 2011-03-23 2014-08-05 Spidercrunch Limited Fast device classification
CN102130920A (zh) * 2011-04-19 2011-07-20 成都梯度科技有限公司 一种僵尸网络的发现方法及其系统
CN112261004B (zh) * 2020-09-27 2022-05-27 新华三信息安全技术有限公司 一种Domain Flux数据流的检测方法及装置

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6944673B2 (en) * 2000-09-08 2005-09-13 The Regents Of The University Of Michigan Method and system for profiling network flows at a measurement point within a computer network
US8479057B2 (en) * 2002-11-04 2013-07-02 Riverbed Technology, Inc. Aggregator for connection based anomaly detection

Also Published As

Publication number Publication date
ES2496982T3 (es) 2014-09-22
WO2010037955A1 (fr) 2010-04-08
EP2353272B1 (fr) 2014-06-04
EP2353272A1 (fr) 2011-08-10

Similar Documents

Publication Publication Date Title
TWI369882B (en) Method and apparatuses for network society associating
IL231917A0 (en) System and method for network management
GB2449991B (en) Non-bolt joint structure and method for producing non-bolt joint structure
EP2223538A4 (en) METHOD AND ARRANGEMENT FOR NETWORK QOS
EP2339784A4 (en) METHOD AND DEVICE FOR MEASURING NETWORK PERFORMANCE PARAMETERS
EP2082326A4 (en) SYSTEM AND METHOD FOR PROVIDING BETTER EXPERIENCE WITH A POST-TO-POST NETWORK
IL206503A0 (en) System and method to adapt to network congestion
IL215586A (en) Network node and method for using node
HUE036587T2 (hu) Tartományok között hívásátadás módszerei és egységei
GB0911029D0 (en) Systems and methods for providing a consumption network
ZA201203004B (en) Offshore station, foundation for an offshore station, and method for building an offshor station
GB0805695D0 (en) Web content management
GB2459572B (en) Resource management method
EP2281369A4 (en) METHOD AND DEVICE FOR INDEXING NETWORKING METHODS
GB0805964D0 (en) Telecommuications network
GB2467484B (en) Formation evaluation method
GB2475800B (en) Secure network portal
PL2269058T3 (pl) Sposób charakteryzowania odporności paliw na stukanie
PL2229784T3 (pl) Sposób i urządzenie do wytwarzania w czasie rzeczywistym obrazów typu multiview
ZA201103794B (en) Routing method in asymmetric networks
GB0919665D0 (en) Traffic management apparatus
EP2143019A4 (en) SCRIPTABLE OBJECT MODEL FOR SERVICES ON NETWORK BASIS
ZA200701702B (en) Web based telephone management system
PL2353272T3 (pl) Sposób charakteryzowania jednostek przy powstawaniu zmian ruchu sieciowego
HUE043508T2 (hu) Eljárás hálózati paraméterek meghatározására