Patent ID: 7793093
Filing Date: 2010-09-07
Classification: H04L

Abstract:
1. A communications state transition monitoring method in a system for estimating communications state transitions in which a functional unit application analyzer (AA) that analyzes a hierarchical content of communications and a communications processing functional unit cracking analysis protocol stack (CAPS) corresponding to analysis results are completely separated, the communications state transition monitoring method comprising a step of sending requests for necessary data regarding the strata and number of the objects of analysis to said CAPS from said AA, to simultaneously monitor as a stream pair a plurality of communications paths from a single viewpoint, wherein the requests for said necessary data are requests for analysis data that is necessary in accordance with the objects of analysis as designated by the parameters, and the use of either the data of the arrived packet A or the data of the newly arriving packet B can be set according to the host that is the object of attack at the time that a check is made for unauthorized behavior in cases where there are overlapping data portions by making it possible to vary a reconstruction algorithm without limiting the strata and number of the objects of analysis.