Ladas & Parry LLP
Device for detecting cyber attack based on event analysis and method thereof
There are provided a device for detecting a cyber attack and a method thereof. The device for detecting a cyber attack includes an event receiving unit configured to receive an event generated in at least one user terminal according to a behavior of a user who accesses a web server and uses web services provided from a web page, a model generating unit configured to generate an event model by extracting an event pattern corresponding to a behavior of the user based on the received event, and an attack detecting unit configured to detect whether access of the web server by a specific user terminal is an attack by comparing the event model with an event received from the specific user terminal. Therefore, various forms of cyber attacks are rapidly and accurately detected, and it is possible to provide a security service having high availability and reliability.
PENTA SECURITY SYSTEMS INC.
H H G H
H04L H04L G06F H04L
inventional inventional inventional inventional
Duk Soo Sang Gyoo Seok Woo
Kim Sim Lee