METHOD OF DETECTION OF COMPUTER ATTACKS IN INFORMATION AND TELECOMMUNICATION NETWORK Russian patent published in 2014 - IPC G06F11/22 

FIELD: physics, computer technology.

SUBSTANCE: invention relates to methods of detection of computer attacks. The method includes the generation of arrays for saving of the obtained message packets (MP) and control message packets (CMP), an array with attributes of passive space vehicles, arrays for saving of the parameters selected from the saved MPs and CMPs and the arrays for saving of operation parameters of personal computers (PC) and/or of servers of the information and telecommunication network. The arrays are generated, where the respective reference parameters, measured in the test mode of the information and telecommunication network, are saved. MPs are received through the confidential path, from which the parameters relating to passive space vehicles are selected, from MPs the respective parameters are selected and saved in the arrays. They are compared with the respective reference parameters of MPs, in addition they are compared with the current parameters of functioning of PCs and/or of servers of the information and telecommunication network with their reference parameters. The fact of absence of space vehicle is established, if the reference values of parameters coincide with the current values of parameters. Otherwise the decision is made on the fact of influence of the space vehicle on the information and telecommunication network and the earlier saved values of parameters are deleted from the respective arrays with the prohibition of transmission of MPs into the information and telecommunication network and/or PCs and/or servers of the information and telecommunication network are blocked.

EFFECT: increase of coefficient of serviceable activity of the information and telecommunication network.

5 cl, 9 dwg