D3FEND 技术详情

D3-IPCTA

IPC Traffic Analysis

检测

定义

Analyzing standard inter process communication (IPC) protocols to detect deviations from normal protocol activity.

父技术

D3-NTANetwork Traffic Analysis

子技术

无

关联构件

IntranetIPCNetworkTraffic

Intranet IPC Network Traffic

Intranet IPC network traffic is network traffic that does not cross a given network's boundaries and uses a standard inter-process communication (IPC) networking protocol.

语义关系

出向analyzesIntranet IPC Network Traffic

出向kb referenceReference - CAR-2015-04-001: Remotely Scheduled Tasks via AT - MITRE

出向kb referenceReference - CAR-2013-05-005: SMB Copy and Execution - MITRE

出向kb referenceReference - CAR-2013-01-003: SMB Events Monitoring - MITRE

出向kb referenceReference - CAR-2013-09-003: SMB Session Setups - MITRE

出向kb referenceReference - CAR-2014-03-001: SMB Write Request - NamedPipes - MITRE

出向kb referenceReference - CAR-2013-05-003: SMB Write Request - MITRE

出向kb referenceReference - Security System with Methodology for Interprocess Communication Control - Check Point Software Tech Inc