FIELD: information technology.
SUBSTANCE: server is started in the controlled normal operation mode; neural network is formed in anomalous work detection tool by performing the following actions: storing and accumulating in a unit of time values of the server's dynamic response vectors, calculated based on the following parameters: number, size and type of input and output packets for all protocols served by the server; server workload level; level of server random access memory usage; level of server virtual memory usage; number of input-output operations in the server's disk devices; learning set of neural network is formed; neural network is taught to minimize the error in classifying the learning set vectors; server is started in production mode; anomalous work of server is detected.
EFFECT: increasing the security of data transmission.
4 cl
| Title | Year | Author | Number |
|---|---|---|---|
| COMPUTER ATTACKS DETECTION METHOD | 2017 |
|
RU2683631C1 |
| METHOD OF DETECTING UNAUTHORIZED USE OF NETWORK DEVICES OF LIMITED FUNCTIONALITY FROM A LOCAL NETWORK AND PREVENTING DISTRIBUTED NETWORK ATTACKS FROM THEM | 2018 |
|
RU2703329C1 |
| METHOD OF DETECTING COMPUTER ATTACKS TO NETWORKED COMPUTER SYSTEM | 2013 |
|
RU2538292C1 |
| METHOD OF DETECTING NETWORK ATTACKS BASED ON ANALYSIS OF TRAFFIC TIME STRUCTURE | 2017 |
|
RU2680756C1 |
| METHOD OF PROTECTION AGAINST DDOS-ATTACK ON BASIS OF TRAFFIC CLASSIFICATION | 2018 |
|
RU2704741C2 |
| PROTECTION METHOD OF VEHICLE CONTROL SYSTEMS AGAINST INTRUSIONS | 2019 |
|
RU2737229C1 |
| METHOD OF MANAGING CONNECTIONS IN FIREWALL | 2012 |
|
RU2517411C1 |
| METHOD FOR DETECTING NORMAL REACTIONS OF COMPUTER NETWORK NODES TO NETWORK PACKETS RELATED TO UNKNOWN TRAFFIC | 2022 |
|
RU2802164C1 |
| METHOD FOR MONITORING NETWORK ACTIVITY OF COMPUTER NETWORK NODES | 2023 |
|
RU2809918C1 |
| METHOD OF DETECTING NETWORK ATTACKS BASED ON ANALYZING FRACTAL TRAFFIC CHARACTERISTICS IN AN INFORMATION COMPUTER NETWORK | 2019 |
|
RU2713759C1 |
