METHOD AND SYSTEM FOR IDENTIFYING MALICIOUS ACTIVITY OF PREDETERMINED TYPE IN LOCAL NETWORK Russian patent published in 2021 - IPC H04L29/00 

FIELD: information security.

SUBSTANCE: log is accessed to retrieve information on usage associated with at least a part of multiple electronic apparatuses, the information on usage is analysed to identify a subset of electronic apparatuses, the list of the accessed network resources is transmitted to each of the list of network resources from the message, and after the response is analysed, it is determined whether the network resource that generated the response message is associated with malicious activity.

EFFECT: increasing the security of a network by detecting and analysing malicious activity of a predetermined type in a cloud computing system and LANs of other types with physical electronic apparatuses or virtual machines connected thereto.

20 cl, 5 dwg