Stepping-stone detection apparatus and method
Disclosed herein are a stepping-stone detection apparatus and method. The stepping-stone detection apparatus includes a target connection information reception unit for receiving information about a target connection from an intrusion detection system (IDS), a fingerprint generation unit for generating a target connection fingerprint based on the information about the target connection, and generating one or more candidate connection fingerprints using information about one or more candidate connections corresponding to one or more flow information collectors, and a stepping-stone detection unit for detecting a stepping stone by comparing the target connection fingerprint, in which a maximum allowable delay time is reflected, with the candidate connection fingerprints.
ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE
H H H H H H
H04L H04L H04L H04L H04L H04L
inventional inventional inventional additional inventional inventional
Koo-Hong Ik-Kyun Jung-Tae
Kang Kim Kim