CYBER BREACH DIAGNOSTICS SYSTEM FOR USE IN DIAGNOSING WHETHER TARGET NETWORK SYSTEM IS BREACHED BY CYBER ATTACK

• Main Authors: HUANG, Hui-Ching, TSUNG, Pei Kan, CHIU, Ming-Chang, WU, Ming Wei
• Format: Patent
• Language: English
• Published: 30.03.2020

A suspicious event analysis device includes: a display device; a communication circuit, arranged to operably receive multiple suspicious activities records related to multiple computing devices in a target network and corresponding multiple time stamps and multiple attribute tags through internet; a storage circuit, arranged to operably store a suspicious event sequence diagram generating program; and a control circuit, arranged to operably execute the suspicious event sequence diagram generating program to conduct a suspicious event sequence diagram generating operation, so as to identify multiple suspicious events related to the target network as well as multiple time records corresponding to the multiple suspicious events, and to generate and display a suspicious event sequence diagram corresponding to the multiple suspicious events according to the multiple suspicious events and the multiple time records.