公开(公告)号：US20160226894A1

公开(公告)日：2016-08-04

申请号：US14996505

申请日：2016-01-15

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Han Sung LEE ,  Ig Kyun KIM ,  Dae Sung MOON ,  Min Ho HAN

IPC: H04L29/06 ,  G06N99/00

CPC classification number: H04L63/1416 ,  G06F21/552 ,  G06N20/00 ,  H04L63/1425

Abstract: Disclosed are a method and system, capable of performing adaptive intrusion detection proactively coping with a new type of attack unknown to the system and capable of training an intrusion type classification model by using a small volume of training data, the system including a data collector configured to collect host and network log information, an input data preprocessor configured to convert data acquired through the data collector into a feature vector, which is an input type of intelligence intrusion detection, and an intelligence intrusion detection analyzer configured to perform an intrusion detection and a model update by using the extracted feature vector, and an intrusion detection learning model configured to detect an intrusion and learn classification of the type of attack based on training data.

Abstract translation: 公开了一种方法和系统，其能够主动地执行自适应入侵检测，以处理系统未知的新型攻击，并且能够通过使用小量的训练数据来训练入侵型分类模型，所述系统包括配置的数据收集器 收集主机和网络日志信息;输入数据预处理器，被配置为将通过数据收集器获取的数据转换成作为智能入侵检测的输入类型的特征向量;以及智能入侵检测分析器，被配置为执行入侵检测和 通过使用提取的特征向量进行模型更新，以及入侵检测学习模型，其被配置为基于训练数据来检测入侵类型和学习类型的分类。

公开(公告)号：US20150188936A1

公开(公告)日：2015-07-02

申请号：US14249811

申请日：2014-04-10

Applicant: Electronics and Telecommunications Research Institute

Inventor： Jung Tae KIM ,  Min Ho HAN ,  Jong Hoon LEE ,  Ik Kyun KIM ,  Hyun Sook CHO

IPC: H04L29/06

CPC classification number: H04L63/1416 ,  H04L67/2842

Abstract: According to a method and system for real-time malware detection based on web browser plugin, the method and system may connect a web server of a web site through a web browser module, execute a security module through a browser plugin of the web site, update a database for a browser cache of the web site from the web server by the security module, cache a web content of the web site from the web server, match cache data of the web content with the database, and warn about the web content if data matched with the cache data of the web content does not exist in the database.

Abstract translation: 根据基于web浏览器插件的实时恶意软件检测方法和系统，该方法和系统可以通过Web浏览器模块连接网站的Web服务器，通过网站的浏览器插件执行安全模块， 通过安全模块从Web服务器更新网站的浏览器缓存的数据库，从Web服务器缓存网站的网页内容，将网页内容的缓存数据与数据库匹配，并提醒Web内容 如果数据库中不存在与Web内容的缓存数据匹配的数据。

公开(公告)号：US20180203855A1

公开(公告)日：2018-07-19

申请号：US15605282

申请日：2017-05-25

Applicant: Electronics and Telecommunications Research Institute

Inventor： Min Ho HAN ,  Sun Joong KIM ,  Won Joo PARK ,  Jong Hyun PARK ,  Jeong Woo SON

IPC: G06F17/30 ,  G06F17/28

CPC classification number: G06F16/51 ,  G06F16/54 ,  G06F16/58 ,  G06F17/2755 ,  G06K9/00355

Abstract: A technology for allowing anyone to easily create interactive media capable of easily recognizing a user interaction by using a stored image is provided. A system according to the present invention includes an image reconstruction server, an image ontology, and an image repository. The image reconstruction server includes an image reconstruction controller, a natural language processing module, and an image search module. The image reconstruction controller of the image reconstruction server receives a scenario based on a natural language from a user and searches for images desired by the user by using the natural language processing module, the image search module, and the image repository. The natural language processing module of the image reconstruction server performs a morphological analysis and a syntax analysis on the scenario input by the user as a preliminary operation for the search of the image ontology. The image search module of the image reconstruction server automatically generates an ontology search query sentence, such as SPARQL, by using a result of natural language processing, and searches the image ontology by using the generated query sentence.

公开(公告)号：US20150256555A1

公开(公告)日：2015-09-10

申请号：US14635962

申请日：2015-03-02

Applicant: Electronics and Telecommunications Research Institute

Inventor： Yang Seo CHOI ,  Ik Kyun KIM ,  Min Ho HAN ,  Jung Tae KIM ,  Jong Hyun KIM

IPC: H04L29/06

CPC classification number: H04L63/1441 ,  H04L63/1416 ,  H04L63/1425

Abstract: Disclosed are provided a method and a system for network connection chain traceback by using network flow data in order to trace an attack source site for cyber hacking attacks that goes by way of various sites without addition of new equipment of a network or modification a standard protocol when the cyber hacking attack occurs in the Internet and an internal network.

Abstract translation: 提供了一种通过使用网络流数据来网络连接链追溯的方法和系统，以便跟踪通过各种站点进行的网络黑客攻击的攻击源站点，而不添加网络的新设备或修改标准协议 当网络黑客攻击发生在互联网和内部网络时。