JP7505642B2 - 判定装置、判定方法、および、判定プログラム - Google Patents

判定装置、判定方法、および、判定プログラム Download PDF

Info

Publication number
JP7505642B2
JP7505642B2 JP2023514312A JP2023514312A JP7505642B2 JP 7505642 B2 JP7505642 B2 JP 7505642B2 JP 2023514312 A JP2023514312 A JP 2023514312A JP 2023514312 A JP2023514312 A JP 2023514312A JP 7505642 B2 JP7505642 B2 JP 7505642B2
Authority
JP
Japan
Prior art keywords
attack
blind
communication
logs
target
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
JP2023514312A
Other languages
English (en)
Japanese (ja)
Other versions
JPWO2022219819A1 (https=
Inventor
楊 鐘本
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
NTT Inc
NTT Inc USA
Original Assignee
Nippon Telegraph and Telephone Corp
NTT Inc USA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nippon Telegraph and Telephone Corp, NTT Inc USA filed Critical Nippon Telegraph and Telephone Corp
Publication of JPWO2022219819A1 publication Critical patent/JPWO2022219819A1/ja
Application granted granted Critical
Publication of JP7505642B2 publication Critical patent/JP7505642B2/ja
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425—Traffic logging, e.g. anomaly detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer And Data Communications (AREA)
JP2023514312A 2021-04-16 2021-04-16 判定装置、判定方法、および、判定プログラム Active JP7505642B2 (ja)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/JP2021/015759 WO2022219819A1 (ja) 2021-04-16 2021-04-16 判定装置、判定方法、および、判定プログラム

Publications (2)

Publication Number Publication Date
JPWO2022219819A1 JPWO2022219819A1 (https=) 2022-10-20
JP7505642B2 true JP7505642B2 (ja) 2024-06-25

Family

ID=83640320

Family Applications (1)

Application Number Title Priority Date Filing Date
JP2023514312A Active JP7505642B2 (ja) 2021-04-16 2021-04-16 判定装置、判定方法、および、判定プログラム

Country Status (3)

Country Link
US (1) US12381894B2 (https=)
JP (1) JP7505642B2 (https=)
WO (1) WO2022219819A1 (https=)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US12542806B2 (en) * 2021-05-27 2026-02-03 Ntt, Inc. Analysis device, analysis method, and analysis system

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2002318734A (ja) 2001-04-18 2002-10-31 Teamgia:Kk 通信ログ処理方法及びシステム
US20180349602A1 (en) 2017-06-06 2018-12-06 Sap Se Security testing framework including virtualized server-side platform

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP6432210B2 (ja) * 2014-08-22 2018-12-05 富士通株式会社 セキュリティシステム、セキュリティ方法、セキュリティ装置、及び、プログラム
US10587647B1 (en) * 2016-11-22 2020-03-10 Fireeye, Inc. Technique for malware detection capability comparison of network security devices
WO2019013266A1 (ja) 2017-07-12 2019-01-17 日本電信電話株式会社 判定装置、判定方法、および、判定プログラム
US10805345B2 (en) * 2017-09-29 2020-10-13 Paypal, Inc. Blind injection attack mitigation
US12250244B2 (en) * 2020-12-31 2025-03-11 Imperva, Inc. Batch clustering of online attack narratives for botnet detection
CN113055399A (zh) * 2021-03-31 2021-06-29 深信服科技股份有限公司 注入攻击的攻击成功检测方法、系统及相关装置

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2002318734A (ja) 2001-04-18 2002-10-31 Teamgia:Kk 通信ログ処理方法及びシステム
US20180349602A1 (en) 2017-06-06 2018-12-06 Sap Se Security testing framework including virtualized server-side platform

Also Published As

Publication number Publication date
US12381894B2 (en) 2025-08-05
JPWO2022219819A1 (https=) 2022-10-20
US20240154976A1 (en) 2024-05-09
WO2022219819A1 (ja) 2022-10-20

Similar Documents

Publication Publication Date Title
US11237817B2 (en) Operating system update management for enrolled devices
CN105721461B (zh) 利用专用计算机安全服务的系统和方法
US7756843B1 (en) Identifying and processing confidential information on network endpoints
CN102254111B (zh) 恶意网站检测方法及装置
EP2790122B1 (en) System and method for correcting antivirus records to minimize false malware detections
US20070033586A1 (en) Method for blocking the installation of a patch
EP2417551B1 (en) Providing information to a security application
US20150154277A1 (en) Methods and Systems for Machine Learning to Discover Application Compatibility Status
US11550920B2 (en) Determination apparatus, determination method, and determination program
CN110659478A (zh) 在隔离的环境中检测阻止分析的恶意文件的方法
US20250291898A1 (en) Generating mitigating responses to security deficiencies using generative machine learning models
JP7593483B2 (ja) 判定装置、判定方法、および、判定プログラム
CN115495740A (zh) 一种病毒检测方法和装置
US8935778B2 (en) Maintaining data integrity
JP7505642B2 (ja) 判定装置、判定方法、および、判定プログラム
JP2007047884A (ja) 情報処理システム
CN111131166A (zh) 一种用户行为预判方法及相关设备
CN115242608A (zh) 告警信息的生成方法、装置、设备及存储介质
JP6954466B2 (ja) 生成方法、生成装置および生成プログラム
US7231666B2 (en) Method and apparatus for preventing buffer overflow security exploits
JP2024107176A (ja) 分析装置、分析方法及び分析プログラム
EP3077903B1 (en) Methods and systems for machine learning to discover application compatibility status
KR20190061831A (ko) 엔드포인트 dlp를 위한 2계층 기반의 기밀 정보 검출 시스템 및 방법
US20070061140A1 (en) Collation regression testing
WO2022249416A1 (ja) 分析装置、分析方法、および、分析システム

Legal Events

Date Code Title Description
A621 Written request for application examination

Free format text: JAPANESE INTERMEDIATE CODE: A621

Effective date: 20230818

TRDD Decision of grant or rejection written
A01 Written decision to grant a patent or to grant a registration (utility model)

Free format text: JAPANESE INTERMEDIATE CODE: A01

Effective date: 20240514

A61 First payment of annual fees (during grant procedure)

Free format text: JAPANESE INTERMEDIATE CODE: A61

Effective date: 20240527

R150 Certificate of patent or registration of utility model

Ref document number: 7505642

Country of ref document: JP

Free format text: JAPANESE INTERMEDIATE CODE: R150

S533 Written request for registration of change of name

Free format text: JAPANESE INTERMEDIATE CODE: R313533

R350 Written notification of registration of transfer

Free format text: JAPANESE INTERMEDIATE CODE: R350