Method and system for determining intra-session event...

Details Method and system for determining intra-session event... Method and system for determining intra-session event...

2006-01-10

2006-01-10

Burgess, Glenton B. (Department: 2152)

Electrical computers and digital processing systems: multicomput

Miscellaneous

C709S202000, C709S224000, C709S225000, C709S245000, C713S152000, C713S152000, C719S318000

Reexamination Certificate

active

06985920

ABSTRACT:
An intra-session network correlation system receives a stream of network events and then group them into different network session according to each event's event parameters and the corresponding network address translation (NAT) information. An event in the stream is first matched against any existing session, and then categorized using the information about a NAT device that translates a message the event is related to. Finally, at a predefined time, a categorized event is processed to identify other categorized events in accordance with a NAT message or an expiry timer associated with the categorized event, and the categorized event and identified other categorized events are grouped into the same network session.

REFERENCES:
patent: 5566339 (1996-10-01), Perholtz et al.
patent: 6324647 (2001-11-01), Bowman-Amuah
patent: 6336139 (2002-01-01), Feridun et al.
patent: 6493765 (2002-12-01), Cunningham et al.
patent: 6496935 (2002-12-01), Fink et al.
patent: 6550012 (2003-04-01), Villa et al.
patent: 6647400 (2003-11-01), Moran
patent: 6728885 (2004-04-01), Taylor et al.
patent: 6795918 (2004-09-01), Trolan
patent: 6816455 (2004-11-01), Goldberg et al.
patent: 6826697 (2004-11-01), Moran
patent: 6829239 (2004-12-01), Bhatia et al.
patent: 6883162 (2005-04-01), Jackson et al.
patent: 6886102 (2005-04-01), Lyle
patent: 2003/0088788 (2003-05-01), Yang
patent: 2003/0120935 (2003-06-01), Teal et al.
patent: 2003/0149766 (2003-08-01), Syvanne et al.
patent: 2003/0154399 (2003-08-01), Zuk et al.
patent: 2003/0165121 (2003-09-01), Leung et al.
patent: 2003/0182580 (2003-09-01), Lee
patent: 2003/0200318 (2003-10-01), Chen et al.
patent: 2004/0049693 (2004-03-01), Douglas
patent: 2004/0049698 (2004-03-01), Ott et al.
patent: 2004/0073704 (2004-04-01), Paunikar et al.
patent: 2004/0098623 (2004-05-01), Scheidell
patent: 2004/0103021 (2004-05-01), Scarfe et al.
patent: 2004/0111637 (2004-06-01), Baffes et al.
patent: 2004/0139228 (2004-07-01), Takeda et al.
patent: 2004/0153533 (2004-08-01), Lewis
patent: 2004/0193943 (2004-09-01), Angelino et al.
patent: 2004/0250122 (2004-12-01), Newton
patent: 2005/0005017 (2005-01-01), Ptacek et al.
patent: 2005/0037733 (2005-02-01), Coleman et al.
patent: 2005/0044406 (2005-02-01), Stute
patent: 2002261788 (2002-09-01), None
Vinga, Giovanni; Valeur, Fredrik; Kemmerer, Richard A.; Designing and Implementing a Family of Intrusion Detection Systems Sep. 1-5, 2003, ESEC/FSE '03, Helksink, Finland 2003 ACM Inc.
Julisch, Klaus, Clustering Instrusion Detection Alarms to Support Root Cause Analysis Nov. 2003, ACM Inc., vol. 6, No 4, pp. 443-471.
Srisuresh, P.; Holdrege M.; Lucent Technolgies, IP Network Address Translator (NAT) Terminiology and Considerations Aug. 1999, The Internet Society.
International Business Machines Corporation, Methods for Advanced Event Correlation Jan. 2003 ,Kenneth Mason Publicatins Ltd.
Peng Ning ,Sushil Jajodia ,Xiaoyang Sean Wang ,Abstraction-based intrusion detection in distributed environments (2001),ACM Transactions on Information and System Security (TISSEC) ,vol. 4 , Issue 4,pp.: 407-452,ISSN:1094-9224.
Helmer, Guy Gary, Ph.D., Iowa State University, 2000,Intelligent multi-agent system for intrusion detection and countermeasures,155 pages; AAT 9990452.
Lam, Kwok-Yan, Hui, Lucas, Chung, Siu-Leung. ,Multivariate data analysis software for enhancing system security The Journal of Systems and Software. New York: Dec. 1995. vol. 31, Iss. 3; p. 267 (9 pages).

Affiliated with

Also associated with

Rating

Method and system for determining intra-session event... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method and system for determining intra-session event..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and system for determining intra-session event... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3552649