A Practical Network Malicious Behavior Monitoring System
Hongyu Zhu, Jianwei Tian, Zheng Tian, Hong Qiao, Li Xi, Shu Li · 2019
Monitoring network traffic is an efficient way to find out the potential information security threats of a company. The implementation of a malicious network traffic detection system is introduced in this paper. The introduced system applies different analysis strategies according to different network connection directions. By implement the proposed system, all unauthorized open ports within a company's network can be found without adding any net-work load, and 97% of Remote Access Trojan connections of the dataset are successfully detected.