Abnormal Behavior Detection


Hillstone’s Abnormal Behavior engine continuously monitors the network to learn what normal network traffic looks like for that particular day, time, and month; providing alerts when network activity exceeds calculated thresholds. It uses a 50+ dimensional array to calculate normal network traffic from layer L4-L7, called “behavior modeling.”


In addition, it has been trained with real hacking tools to ensure that it will readily recognize malicious activity. These techniques limit false positives and provide the user with multiple opportunities to stop an attack.


The menu on the left shows the products from the portfolio corresponding with the search keyword " Abnormal Behavior Detection".

related news items

What security developments can we expect in 2019?

Why you should leverage a next-gen firewall platform?