Qnap Systems, Inc.

Shih-Chan Huang

Shih-Ming Hu

Charng-Da Lu

Yu-Jui Cheng

Mao-Hung Cheng

Hua-Chung Kung

Tong-Bo Su

An authorized access list generation method including: at least one network service providing device registering for an authorized access list notification service with a server, the authorized access list including at least one authorization related record of at least one legitimate user device; the legitimate user device outputting a user ID to the server to log into the server, and directly sending an access request to a target network service provider after logging into the server, and continuing to provide an IP address being used and a device ID to the server to update a corresponding authorization related record; and the target network service providing device comparing the IP address, stored in each authorization related record of the authorized access list, with the IP address of a user device issuing an access request, and rejecting the access request if no matched result is found.

Authorized access list generation method and information security system using same

A network malicious behavior detection method, including: checking each piece of network packet to determine whether a protocol payload contained therein matches an element in a predetermined protocol payload set, marking each piece of the network packet as a suspicious network packet if the check result is true, and transferring each piece of the network packet to a target device if the check result is false; and performing a malicious behavior checking process on at least one piece of the suspicious network packet, blocking the transfer of at least one piece of the suspicious network packet to the target device if the check result is true, and enabling the transfer of at least one piece of the suspicious network packet to the target device if the check result is false.

Network malicious behavior detection method and networking system using same

In an internal network monitoring method for monitoring an internal network, a specified network packet, which is scheduled to be transmitted via a specified path, is inspected. A packet characteristic is extracted from a data link layer of the specified network packet. The specified network packet is directly transmitted via the specified path if the packet characteristic does not comply with a preset condition. The specified network packet is redirected to be transmitted via another path different from the specified path or mirroring the specified network packet to create a mirror packet if the packet characteristic complies with the preset condition.

Growing community of inventors

Taipei, Taiwan

Shih-Chan Huang