FIELD: information security.
SUBSTANCE: reduced time for monitoring by a system of monitoring packets of incoming and outgoing data streams is provided by reducing the number of signatures of computer attacks based on detecting strong correlation links between parameters characterizing the incoming and outgoing data stream.
EFFECT: shorter time for the monitoring system to check the checked packets of the incoming and outgoing data stream to values not exceeding the time of receipt of the next packet.
1 cl, 1 dwg
| Title | Year | Author | Number |
|---|---|---|---|
| COMPUTER ATTACK DETECTION SYSTEM WITH ADAPTIVE CHANGE OF COMPLEX RULES | 2021 |
|
RU2782711C1 |
| METHOD FOR ADJUSTING THE PARAMETERS OF A MACHINE LEARNING MODEL IN ORDER TO IDENTIFY FALSE TRIGGERING AND INFORMATION SECURITY INCIDENTS | 2020 |
|
RU2763115C1 |
| SYSTEM AND METHOD OF CORRELATING EVENTS FOR DETECTING INFORMATION SECURITY INCIDENT | 2019 |
|
RU2739864C1 |
| METHOD FOR PROCESSING INFORMATION SECURITY EVENTS PRIOR TO TRANSMISSION FOR ANALYSIS | 2020 |
|
RU2762528C1 |
| SYSTEM AND METHOD OF DETECTING THE SIGNS OF COMPUTER ATTACKS | 2017 |
|
RU2661533C1 |
| METHOD FOR EARLY DETECTION OF DESTRUCTIVE EFFECTS OF BOTNET ON A COMMUNICATION NETWORK | 2019 |
|
RU2731467C1 |
| SYSTEM AND METHOD FOR AUTOMATIC ASSESSMENT OF QUALITY OF NETWORK TRAFFIC SIGNATURES | 2021 |
|
RU2781822C1 |
| METHOD OF DETECTING AND COUNTERACTING DISTRIBUTION OF MALICIOUS PROGRAMS IN COMPUTER NETWORK | 2023 |
|
RU2818022C1 |
| SYSTEM AND METHOD FOR IDENTIFYING MALICIOUS FILES | 2017 |
|
RU2673407C1 |
| METHOD FOR FILTERING EVENTS FOR TRANSMISSION TO REMOTE DEVICE | 2022 |
|
RU2813239C1 |
