An Abnormal Connection Detection System based on network flow analysis

Recently, cyber-targeted attacks such as APT are rapidly growing as a social and national security threat. For this, our paper aims to cope with the cyber-targeted attack for recognizing the abnormal network connections with the flow data analysis method prior to the attacks being executed. The proposed Abnormal Connection Detection System can detect anomalous network connections by means of a statistical analysis and was evaluated in the experimental testbeds environment where the system was practically deployed.