A communication system for transmitting data of a first mobile station to a second mobile station includes a base station and a relay device The base station is utilized for configuring an uplink and a downlink of the data to correspond to a first connection ID and a second connection ID respectively and for transmitting a traffic encryption key to the first and second mobile stations so that the first and second mobile stations share the traffic encryption key The relay device is coupled to the base station and the first and second mobile stations via wireless communication, and utilized for receiving the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station according to the first and second connection IDs without going via the base station

Communication system and method thereof

System and the method for tracking a position of web user

An apparatus and a method for an attack source traceback capable of tracing back an attacker, that is, an attack source present behind a command and control (CC a traceback agent installing unit installing a traceback agent in the server based on the information on the server; and a traceback unit finding an attack source for the system by analyzing network information of the server obtained by the traceback agent.

Apparatus and method for attack source traceback

The invention relates to an intrusion detection method and device for industrial control system based on a convolutional neural network, a computer device and a computer readable storage medium, and the method comprises the steps: extracting an original data set of an industrial control system from a network data set of a communication protocol of the industrial control system; dividing the original data set into a training data set and a test data set according to a preset proportion; training the training data set through a convolutional neural network classification model to obtain an optimal classification model; and inputting the test data set into the optimal classification model for classification processing, and obtaining an intrusion detection result of the industrial control system. According to the scheme, the classification model with excellent performance is designed through the convolutional neural network, massive data can be processed quickly, multi-classification can be performed, and the classification performance is more accurate, so that the technical problem of poor classification precision of an industrial control system intrusion detection method in the priorart is solved.

Intrusion detection method and device for industrial control system, and equipment and storage medium

The present invention relates to a system and method for tracking a remote server accessed by a code-injected malicious code. The system for tracking a remote server accessed by a malicious code, according to the present invention, comprises: an image loading monitoring unit for monitoring whether a process loaded on a memory includes a communication module; a monitoring module insertion unit for inserting, into the process, a monitoring module for monitoring operations of the communication module; a network connection management unit for receiving, from the monitoring module inserted into the process, network communication information between the communication module and the remote access server and managing the information; a malicious code diagnosis unit for diagnosing the harmfulness of the process; and an access server tracking unit for performing, in the network connection management unit, a query on the process diagnosed as a malicious process by the malicious code diagnosis unit so as to obtain information on the remote access server communicating with the diagnosed malicious process.

System and method for tracking remote access server accessed by mallicious code

PURPOSE: A device and method for chasing the root of an invader is provided to execute a reverse chase of the root of an invader sequentially without changing components of a network through all networks including the Internet. CONSTITUTION: A detection module(7) detects an invasion and analyzes an invasion-detected system. A reverse chase agent(2) obtains an IP address of a previous system based on traces created in the system caused by an invasion. A server(4) receives an IP address of the system analyzed from the detection module(7) and the reverse chase agent(2), and monitors/manages a chase state of the reverse chase agent(2). An agent installation module(5) installs the reverse chase agent(2) in the system of the IP address being supplied from the server(4). An analysis module(3) communicates the reverse chase agent(2) with the server(4) safely and analyzes the system based on the obtained IP address. A data managing module(6) stores a series of chase and analysis processes being supplied from the server(4) and supplies data necessary for a searching process to the server(4).

Apparatus and method for tracking an intruder's origin

PURPOSE: A system and a method for detecting intrusion using a hybrid neural network are provided to detect the intrusion including an unknown intrusion pattern and to process the intrusion in real-time. CONSTITUTION: A packet collector(110) collects a packet existed on the network. A packet preprocessor(120) patterns the collected packet through a preprocessing process in order to use the packet collected through the packet collector as an input value of the neural network. An intrusion detection pattern learning part(210) learns the patterned packet by receiving the patterned packet from the packet preprocessor and using the clustering neuron network, and clusters the intrusion detection pattern by using a data distribution and a frequency. An intrusion detection judging part(220) receives a clustering result value and the connection level information of the patterned packet, learns the intrusion detection judgment through the result value and the connection level information by using the learning neuron network, and detects the intrusion.

Incursion detection system using the hybrid neural network and incursion dectection method using the same

PURPOSE: An authentication method for protecting an agent and a message is provided, which defends the attack from a malicious agent and message level, and assures authentication at an initial access trial process. CONSTITUTION: According to the authentication method, a transmitter agent(1) request authentication to a facilitator(2) in order to transfer a message to an unknown agent. The facilitator performs mutual authentication with the transmitter agent and then exchanges a session key. The facilitator finds an agent coinciding with its object and performs mutual authentication, and then exchanges the session key. And the transmitter agent constitutes an independent security channel with a receiver agent(3) selected using the session key.

Ko Jae Yeong

Papers

Apparatus and method for tracking an intruder's origin

Incursion detection system using the hybrid neural network and incursion dectection method using the same

Method of authentication for protecting agent and messages