Efficient signature packing for an intrusion detection system

Details Efficient signature packing for an intrusion detection system Efficient signature packing for an intrusion detection system

2005-01-25

2009-11-24

Vu, Kimyen (Department: 2435)

Information security

Monitoring or scanning of software or data including attack...

Intrusion detection

C726S022000, C713S150000, C713S187000, C380S255000, C709S224000

Reexamination Certificate

active

07624446

ABSTRACT:
A flow assignment module identifies different network flows' characteristics and the characteristics of the signatures for the different network flows. Based on the identified characteristics, the flow assignment module assigns a network flow to a hash table among a small set of hash tables for storing signatures for that network flow. The flow assignment module assigns the network flow in such a way to minimize the likelihood that a signature for the network flow is hashed to a table entry that frequently occurs in a different network flow assigned to the same hash table. The flow assignment module identifies a hash table for the network flow where there is the least overlap between a signature for that network flow and a frequent byte in another network flow.

REFERENCES:
patent: 5532694 (1996-07-01), Mayers et al.
patent: 5920900 (1999-07-01), Poole et al.
patent: 6052697 (2000-04-01), Bennett et al.
patent: 6064671 (2000-05-01), Killian
patent: 6115802 (2000-09-01), Tock et al.
patent: 6279113 (2001-08-01), Vaidya
patent: 6289375 (2001-09-01), Knight et al.
patent: 6584565 (2003-06-01), Zamek
patent: 6754662 (2004-06-01), Li
patent: 6910118 (2005-06-01), Kagawa
patent: 7039950 (2006-05-01), Parekh et al.
patent: 7069268 (2006-06-01), Burns et al.
patent: 7328349 (2008-02-01), Milliken
patent: 7394809 (2008-07-01), Kumar et al.
patent: 2002/0169937 (2002-11-01), Kagawa
patent: 2003/0066033 (2003-04-01), Direen et al.
patent: 2003/0149887 (2003-08-01), Yadav
patent: 2003/0154399 (2003-08-01), Zuk et al.
patent: 2003/0236992 (2003-12-01), Yami
patent: 2004/0049693 (2004-03-01), Douglas
patent: 2004/0083347 (2004-04-01), Parson
patent: 2004/0250114 (2004-12-01), Parekh et al.
patent: 2005/0108617 (2005-05-01), Lappin, Jr.
patent: 2005/0141519 (2005-06-01), Rajgopal et al.
patent: 2005/0270984 (2005-12-01), Kodialam et al.
patent: 2005/0270985 (2005-12-01), Hao et al.
patent: 2006/0143168 (2006-06-01), Rossmann
patent: 2006/0149914 (2006-07-01), Doris

Affiliated with

Also associated with

Rating

Efficient signature packing for an intrusion detection system does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Efficient signature packing for an intrusion detection system, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Efficient signature packing for an intrusion detection system will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4067639