A method, including identifying, in network data traffic, a set of pairs of source and destination nodes, each pair having a given source node, a given destination node, and one or more ports accessed in the traffic between the nodes in each pair, and computing, for each pair, a respective baseline that indicates a first number of the ports that source nodes other than the given source node in the pair accessed on the given destination node during a first period. For each pair, a respective test score is computed that indicates a difference between a second number of the ports that the given source node in the pair accessed on the given destination node during a second period and the baseline, and a preventive action is initiated with respect to the given source node in any of the pairs for which the test score is greater than a threshold.


    Zugriff

    Download


    Exportieren, teilen und zitieren



    Titel :

    Port scan detection using destination profiles


    Beteiligte:
    MESHI YINNON (Autor:in) / AMIT IDAN (Autor:in) / ALLON JONATHAN (Autor:in) / MEYER AVIAD (Autor:in)

    Erscheinungsdatum :

    23.12.2021


    Medientyp :

    Patent


    Format :

    Elektronische Ressource


    Sprache :

    Englisch



    Malicious port scan detection using port profiles

    MESHI YINNON / AMIT IDAN / ALLON JONATHAN et al. | Europäisches Patentamt | 2022

    Freier Zugriff

    AI-BASED DESTINATION PORT CODE PREDICTION SYSTEM

    Europäisches Patentamt | 2025

    Freier Zugriff

    AI-BASED DESTINATION PORT CODE PREDICTION SYSTEM

    LIM CHAE HYOUK / KIM SUNG JIN / LEE KWANG RYUL | Europäisches Patentamt | 2023

    Freier Zugriff

    Port profiles

    Online Contents | 1994


    Port Profiles

    Online Contents | 1994