보안큐브를 이용한 네트워크 상태 표시장치 및 방법
장범환, 손선경, 정치윤, 나중찬, 방효찬, 이수형, 김현주, 장종수, 유종호, 김종현, 손승원, 박원주, 김건량
- 8014310 (2011.09.06)
06MK1100, 고성능 네트워크 정보보호 시스템 개발,
- An apparatus and method for visualizing a network condition related to a network security are provided. The apparatus includes a traffic feature extracting unit, a network condition displaying unit, and a traffic abnormal condition determining unit. The traffic feature extracting unit extracts information including source address, source port, destination address, and destination port from network traffics, selects two of the extracted information, and calculates unique dispersion degrees of two unselected information. The network condition displaying unit displays a two-dimensional cube expressed using the calculated unique dispersion degrees for the classified traffics. The traffic abnormal condition determining unit determines whether the traffics are in an abnormal condition or not based on the two-dimensional security cube.
- KSP 제안 키워드
- Feature extracting, Source address, network condition, network security, two-dimensional(2D)