Electronics and Telecommunications Research Institute

Chee-Hang Park

Sung-Won Sohn

Seung-Min Lee

Taek-Yong Nam

Jeong-Nyeo Kim

Bo-Heung Chung

Seungho Ryu

A network correction security system. The network correction security system connected between a network node and a security-related external system, detects attacks on the network node, corrects weak parts of the performance of the network node, collects information for improving the security performance of the network node from a security-related external system, analyzes the information, monitors principal resources of the network node to detect a fault, and removes the fault according to a measure corresponding to a grade of the fault. The network correction security system carries out a recovery process when the fault has not been corrected, and recovers the functions of the network node according to a recovery mechanism when the fault has not been removed after the recovery process.

Network correction security system and method

A method for dynamically changing an intrusion detection rule in a kernel level intrusion detection system is disclosed. The method includes the steps of: a) generating a replica of the intrusion detection rule in a kernel area; b) changing the replica of the intrusion detection rule according to a request of changing the intrusion detection rule from the kernel area; and c) changing a currently applied intrusion detection rule by exchanging a value of a pointer representing the intrusion detection rule with a value of a pointer representing the changed replica of the intrusion detection rule.

Method for dynamically changing intrusion detection rule in kernel level intrusion detection system

Growing community of inventors

Daejon, South Korea

Chee-Hang Park