An Abnormal Connection Detection System based on network flow analysis
Jonghoon Lee, Ik Kyun Kim, Kijun Han · 2015
Recently, cyber-targeted attacks such as APT are rapidly growing as a social and national security threat. For this, our paper aims to cope with the cyber-targeted attack for recognizing the abnormal network connections with the flow data analysis method prior to the attacks being executed. The proposed Abnormal Connection Detection System can detect anomalous network connections by means of a statistical analysis and was evaluated in the experimental testbeds environment where the system was practically deployed.