Information security – Monitoring or scanning of software or data including attack... – Intrusion detection
Reexamination Certificate
2011-01-04
2011-01-04
Chai, Longbit (Department: 2431)
Information security
Monitoring or scanning of software or data including attack...
Intrusion detection
C726S024000, C726S025000, C726S026000, C726S027000, C713S168000, C713S169000, C713S170000, C713S171000, C713S174000
Reexamination Certificate
active
07865955
ABSTRACT:
An apparatus and method for extracting signature candidates and optimizing a corresponding signature are provided. The apparatus includes a packet separator, a header parser, a traffic information generator, a substring extractor, and a signature candidate extractor. The packet separator separates a packet into a header and a payload. The header information parser parses the header information, and the traffic information generator generates traffic information. The substring extractor measures a frequency of appearing of a substring with a predetermined length in the separated payload for a constant observation period, and extracts a substring having a frequency higher than a predetermined setup value by updating the measured frequency information to a substring frequency table. The signature candidate extractor generates a signature by collecting the extracted substring information and the generated traffic information, updates a signature frequency table, and extracts a signature candidate with reference to information of the signature frequency table.
REFERENCES:
patent: 5440723 (1995-08-01), Arnold et al.
patent: 6279113 (2001-08-01), Vaidya
patent: 2003/0145225 (2003-07-01), Bruton, III et al.
patent: 2005/0229254 (2005-10-01), Singh et al.
patent: 2006/0123480 (2006-06-01), Oh et al.
patent: 2004-102489 (2004-12-01), None
Moon Hwa Shin
Oh Jin Tae
Yi Sung Won
Chai Longbit
Electronics and Telecommunications Research Institute
Ladas & Parry LLP
LandOfFree
Apparatus and method for extracting signature candidates of... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Apparatus and method for extracting signature candidates of..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Apparatus and method for extracting signature candidates of... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2637830