SG11201709904SA - Method, device, server and storage medium of detecting dos/ddos attack - Google Patents

Method, device, server and storage medium of detecting dos/ddos attack

Info

Publication number
SG11201709904SA
SG11201709904SA SG11201709904SA SG11201709904SA SG11201709904SA SG 11201709904S A SG11201709904S A SG 11201709904SA SG 11201709904S A SG11201709904S A SG 11201709904SA SG 11201709904S A SG11201709904S A SG 11201709904SA SG 11201709904S A SG11201709904S A SG 11201709904SA
Authority
SG
Singapore
Prior art keywords
data
traffic
service
overall
time interval
Prior art date
Application number
SG11201709904SA
Other languages
English (en)
Inventor
Yuanming Wang
Original Assignee
Ping An Technology Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ping An Technology Shenzhen Co Ltd filed Critical Ping An Technology Shenzhen Co Ltd
Publication of SG11201709904SA publication Critical patent/SG11201709904SA/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1458—Denial of Service
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0876—Network utilisation, e.g. volume of load or congestion level
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/16—Threshold monitoring
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Environmental & Geological Engineering (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
SG11201709904SA 2016-11-15 2017-04-05 Method, device, server and storage medium of detecting dos/ddos attack SG11201709904SA (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201611005954.7A CN106411934B (zh) 2016-11-15 2016-11-15 DoS/DDoS攻击检测方法和装置
PCT/CN2017/079483 WO2018090544A1 (zh) 2016-11-15 2017-04-05 DoS/DDoS攻击检测方法和装置、服务器和存储介质

Publications (1)

Publication Number Publication Date
SG11201709904SA true SG11201709904SA (en) 2018-06-28

Family

ID=59229862

Family Applications (1)

Application Number Title Priority Date Filing Date
SG11201709904SA SG11201709904SA (en) 2016-11-15 2017-04-05 Method, device, server and storage medium of detecting dos/ddos attack

Country Status (8)

Country Link
US (1) US10404743B2 (zh)
EP (1) EP3544250B1 (zh)
JP (1) JP2019501547A (zh)
KR (1) KR102238612B1 (zh)
CN (1) CN106411934B (zh)
AU (1) AU2017268608B2 (zh)
SG (1) SG11201709904SA (zh)
WO (1) WO2018090544A1 (zh)

Families Citing this family (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106411934B (zh) 2016-11-15 2017-11-21 平安科技（深圳）有限公司 DoS/DDoS攻击检测方法和装置
JP6863091B2 (ja) * 2017-05-31 2021-04-21 富士通株式会社 管理装置、管理方法及び管理プログラム
CN107302534A (zh) * 2017-06-21 2017-10-27 广东工业大学 一种基于大数据平台的DDoS网络攻击检测方法及装置
RU2676021C1 (ru) * 2017-07-17 2018-12-25 Акционерное общество "Лаборатория Касперского" Система и способ определения DDoS-атак
CN108712365B (zh) * 2017-08-29 2020-10-27 长安通信科技有限责任公司 一种基于流量日志的DDoS攻击事件检测方法及系统
CN108322463A (zh) * 2018-01-31 2018-07-24 平安科技（深圳）有限公司 DDoS攻击检测方法、装置、计算机设备和存储介质
CN108683681A (zh) * 2018-06-01 2018-10-19 杭州安恒信息技术股份有限公司 一种基于流量策略的智能家居入侵检测方法及装置
CN109194661B (zh) * 2018-09-13 2021-10-26 网易（杭州）网络有限公司 网络攻击告警阈值配置方法、介质、装置和计算设备
CN109587167B (zh) * 2018-12-28 2021-09-21 杭州迪普科技股份有限公司 一种报文处理的方法和装置
CN111143169B (zh) * 2019-12-30 2024-02-27 杭州迪普科技股份有限公司 异常参数检测方法及装置、电子设备、存储介质
CN113518057B (zh) * 2020-04-09 2024-03-08 腾讯科技（深圳）有限公司 分布式拒绝服务攻击的检测方法、装置及其计算机设备
CN111614634B (zh) * 2020-04-30 2024-01-23 腾讯科技（深圳）有限公司 流量检测方法、装置、设备及存储介质
CN111737028B (zh) * 2020-06-16 2024-02-23 中国银行股份有限公司 Dubbo服务检测方法及装置
CN112083659A (zh) * 2020-09-27 2020-12-15 珠海格力电器股份有限公司 智能家居系统安全的监测方法、智能家居系统及存储介质
CN112333045A (zh) * 2020-11-03 2021-02-05 国家工业信息安全发展研究中心 智能流量基线学习方法、设备和计算机可读存储介质
CN112351042B (zh) * 2020-11-16 2023-04-07 百度在线网络技术（北京）有限公司 攻击流量计算方法、装置、电子设备和存储介质
CN112738099B (zh) * 2020-12-28 2022-07-12 北京天融信网络安全技术有限公司 一种检测慢速攻击的方法、装置、存储介质和电子设备
CN115118464A (zh) * 2022-06-10 2022-09-27 深信服科技股份有限公司 一种失陷主机检测方法、装置、电子设备及存储介质

Family Cites Families (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7788718B1 (en) * 2002-06-13 2010-08-31 Mcafee, Inc. Method and apparatus for detecting a distributed denial of service attack
US7716737B2 (en) * 2002-11-04 2010-05-11 Riverbed Technology, Inc. Connection based detection of scanning attacks
US7463590B2 (en) * 2003-07-25 2008-12-09 Reflex Security, Inc. System and method for threat detection and response
JP4914468B2 (ja) * 2004-02-02 2012-04-11 株式会社サイバー・ソリューションズ 不正情報検知システム及び不正攻撃元探索システム
US20050195840A1 (en) * 2004-03-02 2005-09-08 Steven Krapp Method and system for preventing denial of service attacks in a network
CN100370757C (zh) * 2004-07-09 2008-02-20 国际商业机器公司 识别网络内分布式拒绝服务攻击和防御攻击的方法和系统
US7584507B1 (en) * 2005-07-29 2009-09-01 Narus, Inc. Architecture, systems and methods to detect efficiently DoS and DDoS attacks for large scale internet
WO2008052291A2 (en) 2006-11-03 2008-05-08 Intelliguard I.T. Pty Ltd System and process for detecting anomalous network traffic
CN101355463B (zh) * 2008-08-27 2011-04-20 成都市华为赛门铁克科技有限公司 网络攻击的判断方法、系统和设备
CN101741847B (zh) * 2009-12-22 2012-11-07 北京锐安科技有限公司 一种ddos攻击检测方法
CN102143143B (zh) * 2010-10-15 2014-11-05 北京华为数字技术有限公司 一种网络攻击的防护方法、装置及路由器
US9282113B2 (en) * 2013-06-27 2016-03-08 Cellco Partnership Denial of service (DoS) attack detection systems and methods
US9172721B2 (en) * 2013-07-16 2015-10-27 Fortinet, Inc. Scalable inline behavioral DDOS attack mitigation
CN103618718B (zh) * 2013-11-29 2016-09-21 北京奇虎科技有限公司 针对拒绝服务攻击的处理方法及装置
CN104753863B (zh) * 2013-12-26 2018-10-26 中国移动通信集团公司 一种分布式拒绝服务攻击的防御方法、设备及系统
US20160036837A1 (en) * 2014-08-04 2016-02-04 Microsoft Corporation Detecting attacks on data centers
US10171491B2 (en) * 2014-12-09 2019-01-01 Fortinet, Inc. Near real-time detection of denial-of-service attacks
CN106411934B (zh) 2016-11-15 2017-11-21 平安科技（深圳）有限公司 DoS/DDoS攻击检测方法和装置

Also Published As

Publication number Publication date
US10404743B2 (en) 2019-09-03
WO2018090544A1 (zh) 2018-05-24
EP3544250A4 (en) 2020-04-29
US20180367565A1 (en) 2018-12-20
KR20190075861A (ko) 2019-07-01
EP3544250A1 (en) 2019-09-25
EP3544250B1 (en) 2021-10-27
CN106411934B (zh) 2017-11-21
CN106411934A (zh) 2017-02-15
AU2017268608A1 (en) 2018-05-31
KR102238612B1 (ko) 2021-04-12
AU2017268608B2 (en) 2019-09-12
JP2019501547A (ja) 2019-01-17

Similar Documents

Publication Publication Date Title
SG11201709904SA (en) Method, device, server and storage medium of detecting dos/ddos attack
RU2016145144A (ru) Чувствительное к шуму представление предупреждения
GB2548270A (en) A Method and system for network access control based on traffic monitoring and vulnerability detection using process related information
EP3882809A4 (en) FACE KEY POINT DETECTION PROCESS, APPARATUS, COMPUTER DEVICE AND STORAGE MEDIA
EP3068095A3 (en) Monitoring apparatus and method
RU2017105879A (ru) Алгоритмы интеллектуального анализа данных, адаптированные для доверенной исполнительной среды
EP3483767A4 (en) DEVICE FOR DETECTING A VARIABLE MALICIOUS CODE BASED ON NEURONAL NETWORK LEARNING, ASSOCIATED METHOD, AND COMPUTER-READABLE RECORDING MEDIUM IN WHICH A PROGRAM FOR EXECUTING SAID METHOD
WO2015104691A3 (en) Systems, methods, and devices for detecting anomalies in an industrial control system
WO2013016064A3 (en) System and method for controlling and monitoring a drilling operation using refined solutions from a panistic inversion
AU2016202184B1 (en) Event correlation across heterogeneous operations
SG11202009794RA (en) Key point detection method and apparatus, electronic device and storage medium
WO2015013376A3 (en) Systems and methods for self-tuning network intrusion detection and prevention
JP2016526205A5 (zh)
EP3200484A4 (en) Indication information determining and processing methods and devices, request message processing method and device, and computer storage medium
GB201012519D0 (en) Method and system for anomaly detection in data sets
WO2014138205A3 (en) Methods, systems, and computer readable media for detecting a compromised computing host
WO2015047802A3 (en) Advanced persistent threat (apt) detection center
RU2016142483A (ru) Регулировка защиты на основании прогнозирования и предупреждения о вредоносной активности
MX2016011399A (es) Gestion del rendimiento de sistemas en sitios industriales.
EP4246530A3 (en) Event detection using a variable threshold
EP2661049A3 (en) System and method for malware detection
EP3624478A4 (en) METHOD, DEVICE, STORAGE MEDIA AND SYSTEM FOR DETERMINING TIME AREA RESOURCES
WO2015084651A3 (en) Method and device for path-loss estimation
PE20142056A1 (es) Sistemas y metodos para monitorizar un sistema de fluido de una maquina para mineria
WO2016033247A3 (en) Population-based learning with deep belief networks