Mechanism to correlate the presence of worms in a network

Details Mechanism to correlate the presence of worms in a network Mechanism to correlate the presence of worms in a network

2011-06-28

2011-06-28

Moazzami, Nasser (Department: 2436)

Information security

Monitoring or scanning of software or data including attack...

Intrusion detection

Reexamination Certificate

active

07971256

ABSTRACT:
A method and a system for preventing a network attack, the attack being caused by the presence of worms in the network, is provided. The method includes determining the number of packets being transmitted from each source in the network to a plurality of destinations, the packets being transmitted from a source with a set of characteristics. If the number of packets with the set of characteristics, being transmitted from a source, exceeds a predefined first threshold, then the signature of the packets is stored. Subsequently, if at least one of the pluralities of destinations of the packets identified with the source becomes a source of new packets, the new packets being transmitted to more than one destination; then the new packets are compared with the signature. If at least one new packet matches with the signature, then the worm is to be detected.

REFERENCES:
patent: 6279113 (2001-08-01), Vaidya
patent: 7457965 (2008-11-01), Tamura et al.
patent: 7469418 (2008-12-01), Wilkinson et al.
patent: 7472418 (2008-12-01), McCorkendale et al.
patent: 2004/0093521 (2004-05-01), Hamadeh et al.
patent: 2005/0033989 (2005-02-01), Poletto et al.
patent: 2005/0091533 (2005-04-01), Omote et al.

Affiliated with

Also associated with

Rating

Mechanism to correlate the presence of worms in a network does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Mechanism to correlate the presence of worms in a network, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Mechanism to correlate the presence of worms in a network will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2635493