A method for real-time detecting and responding to harmful traffic

By rapid development and growth of the Internet, communications has developed into IP-based converged network, based on individual media convergence, such as broadcast, communications, Internet, etc. With the development of network, security issues are very important in managing the network, especially defence against a distributed traffic attack causing traffic congestion can be called essential. In a distributed traffic attack, security management on the new unknown pattern of hazardous traffic as well as the defence against well-known patterns of hazardous traffic is necessary. It is possible to block Internet attacks using defense technology including the sinkhole tunnelling, but real-time detection and response methods are not defined on the unknown traffic patterns, which do not require the sinkhole router. In this paper, the authors propose real-time detection and counter-measures on harmful traffic such as a distributed attack traffic, viruses, etc.