Netzwerkschutz

Details

Veröffentlichungs-Nr.

EP4672051

Aktenzeichen

EP24184889

Anmeldetag

27. Juni 2024

Veröffentlichung

31. Dezember 2025

Rechtsraum

EP

IPC

G06F21/55H04L9/40

Abstract

A computer-implemented method of protecting a network is provided. The method receives security alert data from one or more intrusion detection systems. The security alert data comprises a plurality of security alerts relating to the network. The method generates a plurality of similarity matrices from the security alert data. Each similarity matrix is generated using a different respective similarity function and indicates a respective similarity between each of the security alerts according to that similarity function. The method generates one or more attack graphs from the plurality of similarity matrices. Each attack graph represents a respective set of security alerts, wherein a similarity between each of the security alerts in the set, according to at least one of the similarity matrices, is above a predefined threshold. The method causes one or more predetermined actions to be taken with respect to the network to mitigate a respective attack represented by each of the attack graphs.

Anmelder

Firma

British Telecommunications public limited company

Land

🇬🇧 Großbritannien

Fachgebiete