Method and system for customizing a security policy

Details Method and system for customizing a security policy Method and system for customizing a security policy

2004-08-31

2009-06-16

Vu, Kimyen (Department: 2435)

Information security

Policy

C726S002000, C726S003000, C726S027000, C709S241000

Reexamination Certificate

active

07549158

ABSTRACT:
An intrusion detection system for customizing a security policy that detects an attempt to exploit a vulnerability is provided. A security policy contains criteria and a procedure. The criteria specify attributes of a security event that may be an exploitation, and the procedure specifies instructions to be performed that indicate when a security event may be an exploitation. When the criteria and the procedure both indicate that a security event may be an exploitation, then the security event matches the security policy and an appropriate action is taken. The intrusion detection system allows a user to modify the criteria to customize the security policy.

REFERENCES:
patent: 5950195 (1999-09-01), Stockwell et al.
patent: 6412070 (2002-06-01), Van Dyke et al.
patent: 6678827 (2004-01-01), Rothermel et al.
patent: 7039948 (2006-05-01), Harrah et al.
patent: 7380267 (2008-05-01), Arai et al.
patent: 2003/0110397 (2003-06-01), Supramaniam et al.
patent: 2003/0135759 (2003-07-01), Kim et al.
patent: 2004/0181690 (2004-09-01), Rothermel et al.
patent: 2004/0225877 (2004-11-01), Huang
patent: 2005/0022018 (2005-01-01), Szor
patent: 2005/0240990 (2005-10-01), Trutner et al.
patent: 2006/0005227 (2006-01-01), Samuelsson et al.
patent: 2006/0161965 (2006-07-01), Shelest et al.
B. Moore et al., “Policy Core Information Model—Version 1 Specification (RFC 3060)”, Feb. 2001, Network Working Group, Version 1.
Zhang et al., “An agent based architecture for supporting application level security”, DARPA Information Survivability Conference and Exposition, 2000. DISCEX '00. Proceddings, vol. 1, Jan. 25-27, 2000, pp. 187-198 vol. 1.
U.S. Appl. No. 11/039,637, filed Jan. 19, 2005, Shelest et al.
U.S. Appl. No. 11/150,819, filed Jun. 9, 2005, Shelest et al.

Affiliated with

Also associated with

Rating

Method and system for customizing a security policy does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method and system for customizing a security policy, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and system for customizing a security policy will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4145369