COMPUTER ATTACK DETECTION SYSTEM WITH ADAPTIVE CHANGE OF COMPLEX RULES Russian patent published in 2022 - IPC G06F21/50 

FIELD: information technology.

SUBSTANCE: invention relates to the field of information technology, in particular to information security, namely to information security monitoring tools and provides traffic control and prevention of computer attacks. The effect is achieved by introducing a device for generating complex rules, consisting of a block for determining the path of the package, a block for ordering the applied signatures, a block for generating a complex check rule, a block for saving to the base of complex signatures, the formation of complex rules is ensured, which reduces the number of signature search operations, leads to reducing the time for the monitoring system to check the checked data flow packets, which ensures that the appearance and accumulation of data flow delays are prevented, which ensures the required communication quality.

EFFECT: reducing the time of checking by the monitoring system of the checked packets of the data flow.

1 cl, 1 dwg