 |
| |
Packet Forwarded Router Identification
Function |
 |
| The system will identify the intrusion
path by identifying the router that forwarded the packet sent from
the attacker. Therefore, even if a packet is IP spoofed the system
is able to identify the true attacker. |
|
| |
| |
Stepstool Determination Function |
 |
| If the host of the sent packet
is identified, the system will determine whether or not that host
is being used as a stepstool or not. If the user is determined to
be a stepstool, the tracing process will continue. |
|
| |
Intrusion Path Tracing System |
 |
| Each log (packet log, process information
log, communication history log) used in the path tracing process will
be sent from the log acquisition device to the intrusion path tracing
server and stored in a database. |
|
 |
 |
 |
|
 |
 |
 |
 |
 |
Detailed research of unauthorized access. |
 |
Prevention of indirect unauthorized access. |
|
|
 |
|