 |
There is architecture of proposed system.
Proposed system consists of Zero-Day Attack Packet Detection System and Packet Highlight System.
Also, it uses ZAPDP and ZAPHP for communication between internal systems.
First of all, Flow based PCA sends stored packets when new rules are updated.
NIDPS inspects received packets from Flow based PCA.
If there are matched packets with updated rules in inspection result, it makes the packet to format of ZAPDP and sends to Zero-Day Attack Packet Detection System.
|
IEEE/ICACT20210179 Slide.08
[Big Slide]