INTRUSION RESPONSE APPARATUS AND METHOD FOR VEHICLE NETWORK

    公开(公告)号:US20190332823A1

    公开(公告)日:2019-10-31

    申请号:US16384252

    申请日:2019-04-15

    Abstract: Disclosed herein are an intrusion response apparatus and method for a vehicle network. The intrusion response method for a vehicle network is performed by an intrusion response apparatus for the vehicle network, and includes receiving attack detection information about an intrusive attack on the vehicle network from an intrusion detection system, selecting at least one target electronic control unit that is to be instructed to respond to the intrusive attack from among multiple electronic control units, and sending a response instruction message to the at least one target electronic control unit so that the target electronic control unit responds to the intrusive attack.

    METHOD FOR PROVIDING SECURITY SERVICE FOR WIRELESS DEVICE AND APPARATUS THEREOF
    4.
    发明申请
    METHOD FOR PROVIDING SECURITY SERVICE FOR WIRELESS DEVICE AND APPARATUS THEREOF 审中-公开
    为无线设备提供安全服务的方法及其装置

    公开(公告)号:US20160234205A1

    公开(公告)日:2016-08-11

    申请号:US15007073

    申请日:2016-01-26

    CPC classification number: H04W12/06 H04L63/20 H04W12/08 H04W12/12

    Abstract: Disclosed are a method for providing a security service for a wireless device and an apparatus thereof. The method includes obtaining a wireless fingerprint of a wireless device, determining a wireless device type corresponding to the obtained wireless fingerprint by referring to a first database, determining a security policy corresponding to the determined wireless device type by referring to a second database, and applying the determined security policy to a service for the wireless device, so that the wireless device is provided with a tight security service.

    Abstract translation: 公开了一种用于为无线设备提供安全服务的方法及其装置。 该方法包括获取无线设备的无线指纹,通过参考第一数据库来确定与获得的无线指纹相对应的无线设备类型,通过参考第二数据库确定与所确定的无线设备类型相对应的安全策略,以及应用 所确定的安全策略到无线设备的服务,使得向无线设备提供紧密的安全服务。

    METHOD AND APPARATUS FOR VISUALIZING MEDICAL DEVICE NETWORK AND SECURITY ATTACK

    公开(公告)号:US20240205242A1

    公开(公告)日:2024-06-20

    申请号:US18512891

    申请日:2023-11-17

    CPC classification number: H04L63/1416 H04L41/22

    Abstract: Disclosed herein is a method for visualizing a medical device network and a security threat. The method includes representing nodes in zones that are divided into a server zone including nodes corresponding to server devices, a medical device zone including nodes corresponding to medical devices, a white zone including registered nodes excluding the server devices and the medical devices, and a gray zone including nodes included in none of the above-mentioned zones, representing links between the nodes, and representing a node and a link in which a security attack is detected using a different color when the security attack is detected in the node.

    DEVICE IDENTIFICATION APPARATUS AND METHOD BASED ON NETWORK BEHAVIOR

    公开(公告)号:US20220150145A1

    公开(公告)日:2022-05-12

    申请号:US17507730

    申请日:2021-10-21

    Abstract: Disclosed herein are a device identification apparatus and method based on network behavior. The device identification apparatus includes one or more processors, and execution memory for storing at least one program that is executed by the one or more processors, wherein the at least one program is configured to collect packet data of a device connected to a network through port mirroring and extract behavior features from the packet data, analyze the behavior features and then generate unique information based on a previously created detection model, and extract an identification number corresponding to the unique information from a database and then identify the device.

    SELF-LEARNING-BASED INTRUSION DETECTION APPARATUS AND METHOD

    公开(公告)号:US20240205241A1

    公开(公告)日:2024-06-20

    申请号:US18453703

    申请日:2023-08-22

    CPC classification number: H04L63/1416 H04L63/1425

    Abstract: Disclosed herein are self-learning-based intrusion detection apparatus and method. The self-learning-based intrusion detection apparatus includes memory configured to store at least one program, and a processor configured to execute the program, wherein the program is configured to perform detecting an anomaly behavior in network traffic based on a first detection model, and as a self-learning event is published, generating a second detection model through self-learning in parallel with detecting the anomaly behavior, and wherein the program is configured to perform, as the second detection model is generated, in detecting the anomaly behavior, replacing the first detection model with the second detection model, and thereafter detecting the anomaly behavior in the network traffic.

    ATTACK DETECTION APPARATUS AND METHOD BASED ON MEASUREMENT OF NETWORKING BEHAVIOR ABNORMALITIES IN SYMBOLIC SPACES

    公开(公告)号:US20230208866A1

    公开(公告)日:2023-06-29

    申请号:US18057056

    申请日:2022-11-18

    CPC classification number: H04L63/1425 H04L63/1416 G06F2221/033

    Abstract: Disclosed herein are an attack detection apparatus and method based on measurement of networking behavior abnormalities in symbolic spaces. The attack detection method based on measurement of networking behavior abnormalities in symbolic spaces includes creating profiles based on a transmission address of a flow received from a network, measuring a behavior abnormality of a device corresponding to the transmission address of the flow on the network, and mapping the measured behavior abnormality to behavior symbols in symbolic spaces, generating a behavior symbol sequence pattern, in which the behavior symbols are sequentially connected, for each profile, and detecting presence or non-presence of an attack and a device associated with the attack based on an output of the abnormal behavior prediction model that receives the behavior symbol sequence pattern as input.

Patent Agency Ranking