FTP behavior data processing method and abnormal FTP behavior recognition method and device

A data processing and behavioral technology, applied in the field of network security, can solve problems such as inability to effectively find abnormal FTP behaviors, poor recognition accuracy, and single recognition angle

Active Publication Date: 2020-09-18
NSFOCUS INFORMATION TECHNOLOGY CO LTD +1
View PDF10 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Using the above method to identify abnormal FTP behavior due to the single recognition angle not only has the problem of poor recogniti

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • FTP behavior data processing method and abnormal FTP behavior recognition method and device
  • FTP behavior data processing method and abnormal FTP behavior recognition method and device
  • FTP behavior data processing method and abnormal FTP behavior recognition method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0052] Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided for more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0053] The first embodiment of the present invention provides a method for processing FTP behavior data, which is used to determine the multi-dimensional probability density value of FTP behavior data. The multi-dimensional probability density value can accurately reflect the probability density of FTP behavior data, and thus, using the multi-dimensional probability density value as a basis for identifying abnormal FTP behavior can ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to the technical field of network security, in particular to an FTP behavior data processing method and an abnormal FTP behavior recognition method and device. The method comprises steps of obtaining FTP behavior data; performing feature extraction on the FTP behavior data based on a plurality of user-related features to obtain feature data, each user-related feature comprising more than one user-related sub-feature; based on the feature data, performing kernel density estimation on each user-related sub-feature to obtain a probability density value of each user-related sub-feature; determining a probability density value of each user-related feature according to the probability density values of all user-related sub-features contained in the user-related features; and determining a multi-dimensional probability density value of the FTP behavior data according to the probability density values of all the user-related features, so as to identify an abnormal FTP behavior according to the multi-dimensional probability density value of the FTP behavior data. According to the invention, the accuracy of identifying the abnormal FTP behavior is improved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for processing FTP behavior data, a method and a device for identifying abnormal FTP behavior. Background technique [0002] The File Transfer Protocol (FTP) is a protocol for transferring files between two computers. FTP solves the problem of differences between different operating systems on different computers and realizes universal file transfer. FTP has the characteristics of easy connection and application, but it is precisely because of these characteristics that its security is not high and abnormal behaviors are prone to occur. Therefore, the identification of abnormal FTP behavior is particularly important. [0003] Existing technologies often identify abnormal FTP behaviors through a single dimension. For example, according to the number of failed logins to the server by the FTP behavior per unit time, if the number of failures exceeds the abnormal...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06H04L29/08
CPCH04L63/1425H04L67/06
Inventor 李景皮靖梁莎钟敏
Owner NSFOCUS INFORMATION TECHNOLOGY CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap