System zur Analyse und zur Identifikation von Softwarenetzwerkverhalten

Details

Veröffentlichungs-Nr.

EP2854362

Aktenzeichen

EP14179336

Anmeldetag

31. Juli 2014

Veröffentlichung

30. Januar 2019

Erteilung

30. Januar 2019

Rechtsraum

EP

IPC

H04L29/06

Abstract

A particular method includes detecting, at a detection module, an indicator corresponding to a suspicious software component, where the indicator is detected based on monitored network data of a network system and based on a plurality of network behavior profiles. At least one of the network behavior profiles includes an ordered sequence of network actions. The method further includes determining, at an identification module, whether the indicator corresponds to any of the plurality of network behavior profiles. The method further includes generating output data in response to a determination that the indicator corresponds to a particular network behavior profile of the plurality of network behavior profiles.

Anmelder

Firma

The Boeing Company

Land

🇺🇸 USA

Fachgebiete