2019.09.30
Overview
An attack path detection method is disclosed herein. The attack path detection method includes the following operations: establishing a connecting relationship between a plurality of hosts according to a host log set to generate a host association graph; marking at least one host with an abnormal condition on the host association graph, and calculating a risk value corresponding to each of the plurality of hosts; determining whether the risk value corresponding to each of the plurality of hosts is larger than a first threshold, utilizing a host with the risk value greater than the first threshold as a high-risk host; and searching at least one host attach path between the high-risk host and the at least one host with the abnormal condition according to the connecting relationship of the host association graph.Category
發明
Patented
2019-178427
特許第6859412號
Filing Date
2019.09.30Expired Date
2039.09.29Notification
2022.04.20