×

INTER-ARRIVAL TIME INTRUSION-DETECTION TECHNIQUE TO PROVIDE ENHANCED CYBERSECURITY

  • US 20170222976A1
  • Filed: 02/03/2016
  • Published: 08/03/2017
  • Est. Priority Date: 02/03/2016
  • Status: Active Grant
First Claim
Patent Images

1. A method for performing an intrusion-detection technique to differentiate between packets received from malicious remote users and legitimate local users in a networked computer system, comprising:

  • determining arrival times for incoming packets at a node in the networked computer system;

    determining inter-arrival times between the incoming packets from the arrival times;

    determining a mean cumulative function (MCF) for the inter-arrival times by computing a cumulative sum of the inter-arrival times; and

    upon detecting a change in a slope of the MCF, generating an alarm to indicate that a malicious remote user may be generating some of the incoming packets.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×