IL259472A - מערכת ושיטה לזיהוי אנומליות - Google Patents
מערכת ושיטה לזיהוי אנומליותInfo
- Publication number
- IL259472A IL259472A IL259472A IL25947218A IL259472A IL 259472 A IL259472 A IL 259472A IL 259472 A IL259472 A IL 259472A IL 25947218 A IL25947218 A IL 25947218A IL 259472 A IL259472 A IL 259472A
- Authority
- IL
- Israel
- Prior art keywords
- network traffic
- baseline
- anomaly detection
- pattern
- authorized
- Prior art date
Links
- 238000001514 detection method Methods 0.000 title claims description 100
- 238000000034 method Methods 0.000 title claims description 54
- 238000012545 processing Methods 0.000 claims description 52
- 238000004891 communication Methods 0.000 claims description 22
- 238000005516 engineering process Methods 0.000 claims description 14
- 238000007689 inspection Methods 0.000 claims description 11
- 238000012544 monitoring process Methods 0.000 claims description 8
- 230000008569 process Effects 0.000 description 20
- 230000000694 effects Effects 0.000 description 12
- 238000010586 diagram Methods 0.000 description 7
- 230000007257 malfunction Effects 0.000 description 7
- 238000012549 training Methods 0.000 description 5
- 230000009471 action Effects 0.000 description 4
- 230000002547 anomalous effect Effects 0.000 description 4
- 230000002159 abnormal effect Effects 0.000 description 3
- 230000006399 behavior Effects 0.000 description 3
- 230000003542 behavioural effect Effects 0.000 description 3
- 230000008859 change Effects 0.000 description 3
- 230000003203 everyday effect Effects 0.000 description 3
- 206010000117 Abnormal behaviour Diseases 0.000 description 2
- 238000004590 computer program Methods 0.000 description 2
- 230000007774 longterm Effects 0.000 description 2
- 230000004913 activation Effects 0.000 description 1
- 230000004931 aggregating effect Effects 0.000 description 1
- 238000013480 data collection Methods 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 230000001788 irregular Effects 0.000 description 1
- 230000008520 organization Effects 0.000 description 1
- 230000001902 propagating effect Effects 0.000 description 1
- 230000033764 rhythmic process Effects 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W28/00—Network traffic management; Network resource management
- H04W28/02—Traffic management, e.g. flow control or congestion control
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/14—Network analysis or design
- H04L41/145—Network analysis or design involving simulating, designing, planning or modelling of a network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0894—Policy-based network configuration management
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/06—Generation of reports
- H04L43/062—Generation of reports related to network traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0876—Network utilisation, e.g. volume of load or congestion level
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1416—Event detection, e.g. attack signature detection
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W76/00—Connection management
- H04W76/20—Manipulation of established connections
- H04W76/25—Maintenance of established connections
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Environmental & Geological Engineering (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| IL259472A IL259472B (he) | 2018-05-17 | 2018-05-17 | מערכת ושיטה לזיהוי אנומליות |
| PCT/IL2019/050521 WO2019220427A1 (en) | 2018-05-17 | 2019-05-07 | An anomaly detection system and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| IL259472A IL259472B (he) | 2018-05-17 | 2018-05-17 | מערכת ושיטה לזיהוי אנומליות |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| IL259472A true IL259472A (he) | 2018-07-04 |
| IL259472B IL259472B (he) | 2019-03-31 |
Family
ID=63014188
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| IL259472A IL259472B (he) | 2018-05-17 | 2018-05-17 | מערכת ושיטה לזיהוי אנומליות |
Country Status (2)
| Country | Link |
|---|---|
| IL (1) | IL259472B (he) |
| WO (1) | WO2019220427A1 (he) |
Families Citing this family (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111314294A (zh) * | 2020-01-15 | 2020-06-19 | 福建奇点时空数字科技有限公司 | 一种基于周期性和移动窗口基线算法的异常流量检测方法 |
| CN111614611B (zh) * | 2020-04-01 | 2022-11-08 | 中国电力科学研究院有限公司 | 一种用于电网嵌入式终端的网络安全审计方法及装置 |
| CN115348339B (zh) * | 2022-08-12 | 2023-11-21 | 北京威努特技术有限公司 | 一种基于功能码和业务数据相关性的工控异常检测方法 |
| CN115801538B (zh) * | 2022-11-10 | 2024-12-06 | 云南电网有限责任公司 | 场站服务器应用资产深度识别方法、系统及设备 |
| CN116599888B (zh) * | 2023-05-26 | 2026-04-10 | 中国联合网络通信集团有限公司 | 路由异常确定方法、装置及存储介质 |
| CN117560210A (zh) * | 2023-11-24 | 2024-02-13 | 新华三信息安全技术有限公司 | 一种异常检测方法及装置 |
| CN120915611B (zh) * | 2025-10-10 | 2026-01-20 | 佛山职业技术学院 | 工业数据安全保护方法及系统 |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2011116813A1 (en) * | 2010-03-22 | 2011-09-29 | Telefonaktiebolaget Lm Ericsson (Publ) | Apparatus and method in a telecommunications network |
| WO2013013237A1 (en) * | 2011-07-21 | 2013-01-24 | Movik Networks | Ran analytics, control and tuning via multi-protocol, multi-domain, and multi-rat analysis |
| US9215746B1 (en) * | 2012-09-25 | 2015-12-15 | Sprint Spectrum L.P. | Systems and methods for dynamically controlling active-to-dormant timers in radio access networks |
-
2018
- 2018-05-17 IL IL259472A patent/IL259472B/he active IP Right Grant
-
2019
- 2019-05-07 WO PCT/IL2019/050521 patent/WO2019220427A1/en not_active Ceased
Also Published As
| Publication number | Publication date |
|---|---|
| WO2019220427A1 (en) | 2019-11-21 |
| IL259472B (he) | 2019-03-31 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US12363157B2 (en) | Cyber security appliance for an operational technology network | |
| US12223046B2 (en) | Cyber security using one or more models trained on a normal behavior | |
| Zolanvari et al. | Machine learning-based network vulnerability analysis of industrial Internet of Things | |
| Rubio et al. | Current cyber-defense trends in industrial control systems | |
| WO2019220427A1 (en) | An anomaly detection system and method | |
| EP2040435B1 (en) | Intrusion detection method and system | |
| EP3215944B1 (en) | A system for implementing threat detection using daily network traffic community outliers | |
| Barbosa | Anomaly detection in SCADA systems: a network based approach | |
| EP4193286B1 (en) | Systems, methods, and media for distributed network monitoring using local monitoring devices | |
| Repalle et al. | Intrusion detection system using ai and machine learning algorithm | |
| US9961047B2 (en) | Network security management | |
| Deka et al. | Network defense: Approaches, methods and techniques | |
| Hadziosmanovic et al. | Challenges and opportunities in securing industrial control systems | |
| CN214306527U (zh) | 一种燃气管网调度监控网络安全系统 | |
| Granat et al. | Big data analytics for event detection in the IoT-multicriteria approach | |
| Brenner et al. | Better safe than sorry: Risk management based on a safety-augmented network intrusion detection system | |
| Chen et al. | Towards realizing self-protecting SCADA systems | |
| Kim et al. | Hybrid intrusion forecasting framework for early warning system | |
| Iudica | A monitoring system for embedded devices widely distributed | |
| Haidai et al. | Automatic Network Reconfiguration Method with Dynamic IP Address Management | |
| Bernieri | Deep detection architecture for security in industrial control systems | |
| Zahid et al. | Agentless Approach for Security Information and Event Management in Industrial IoT. Electronics 2023, 12, 1831 | |
| Nevlud et al. | ANOMALY-BASED INTRUSION DETECTION IN IP NETWORKS | |
| Chlapoutakis | Intrusion Detection Systems |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| FF | Patent granted | ||
| KB | Patent renewed |