ETRI-Knowledge Sharing Plaform

KOREAN
특허 검색
Status Country
Year ~ Keyword

Detail

Registered INSIDER THREAT DETECTION DEVICE AND METHOD

내부자 위협 탐지 장치 및 방법
이미지 확대
Inventors
Seon-Gyoung Sohn, Jeong Chi Yoon, Dong Ho Kang, Na Jung-Chan, Kim Ik Kyun, Cho Hyun Sook
Application No.
13475880 (2012.05.18)
Publication No.
20130091085 (2013.04.11)
Registration No.
8965823 (2015.02.24)
Country
UNITED STATES
Project Code
11MS2500, Development of Intrusion detection and response technology based on the security convergence for protecting Information assets of Industrial facilitie, Na Jung-Chan
Abstract
The present invention relates to an insider threat detection device and method which collects and analyzes a variety of information generated by insiders working for an organization, such as behaviors, events, and states of the insider, and detects an abnormal insider who may become a potential threat. According to the present invention, the insider threat detection method and apparatus analyzes information related to insiders using the correlation analysis method, and previously detects an abnormal sign of an insider who may become a potential threat to an organization, which makes it possible to protect the organization from attacks on systems inside the organization or seizure of important information inside the organization.
KSP Keywords
Analysis method, Correlation Analysis, Correlation analysis method, Detection Method, Insider Threat, Insider threat detection, Threat Detection, detection device