Policy-based network security management

Details Policy-based network security management Policy-based network security management

2007-06-26

2007-06-26

Zand, Kambiz (Department: 2134)

Information security

Monitoring or scanning of software or data including attack...

Vulnerability assessment

C726S001000, C726S011000, C726S013000, C726S023000, C726S024000, C713S165000, C713S166000, C713S167000

Reexamination Certificate

active

10688051

ABSTRACT:
A policy-based network security management system is disclosed. In one embodiment, the system comprises a security management controller comprising one or more processors; a computer-readable medium carrying one or more sequences of instructions for policy-based network security management, wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to perform the steps of receiving a set of data regarding a user of a computer network; automatically deciding on a course of action based on the set of data, wherein the course of action may be adverse to the user although the set of data is insufficient to establish whether the user is performing a malicious action; and sending signals to one or more network elements in the computer network to implement the decision.

REFERENCES:
patent: 5787161 (1998-07-01), Rayes et al.
patent: 5933645 (1999-08-01), Wallack
patent: 6038322 (2000-03-01), Harkins
patent: 6049834 (2000-04-01), Khabardar et al.
patent: 6119231 (2000-09-01), Foss et al.
patent: 6131163 (2000-10-01), Wiegel
patent: 6134559 (2000-10-01), Brumme et al.
patent: 6215878 (2001-04-01), Harkins
patent: 6282546 (2001-08-01), Gleichauf et al.
patent: 6298383 (2001-10-01), Gutman et al.
patent: 6298444 (2001-10-01), Foss et al.
patent: 6301613 (2001-10-01), Ahlstrom et al.
patent: 6301668 (2001-10-01), Gleichauf et al.
patent: 6324656 (2001-11-01), Gleichauf et al.
patent: 6327618 (2001-12-01), Ahlstrom et al.
patent: 6347339 (2002-02-01), Morris et al.
patent: 6381646 (2002-04-01), Zhang et al.
patent: 6396833 (2002-05-01), Zhang et al.
patent: 6415321 (2002-07-01), Gleichauf et al.
patent: 6418468 (2002-07-01), Ahlstrom et al.
patent: 6427174 (2002-07-01), Sitaraman et al.
patent: 6434700 (2002-08-01), Alonso et al.
patent: 6463061 (2002-10-01), Rekhter et al.
patent: 6463474 (2002-10-01), Fuh et al.
patent: 6466977 (2002-10-01), Sitaraman et al.
patent: 6477651 (2002-11-01), Teal
patent: 6483921 (2002-11-01), Harkins
patent: 6484261 (2002-11-01), Wiegel
patent: 6484315 (2002-11-01), Ziese
patent: 6487666 (2002-11-01), Shanklin et al.
patent: 6490289 (2002-12-01), Zhang et al.
patent: 6490290 (2002-12-01), Zhang et al.
patent: 6499107 (2002-12-01), Gleichauf et al.
patent: 6530024 (2003-03-01), Proctor
patent: 6539431 (2003-03-01), Sitaraman et al.
patent: 6553489 (2003-04-01), Osler et al.
patent: 6560204 (2003-05-01), Rayes
patent: 6563816 (2003-05-01), Nodoushani et al.
patent: 6567917 (2003-05-01), Ziese
patent: 6578147 (2003-06-01), Shanklin et al.
patent: 6584124 (2003-06-01), Blanc et al.
patent: 6597957 (2003-07-01), Beakley
patent: 6609154 (2003-08-01), Fuh et al.
patent: 6609205 (2003-08-01), Bernhard et al.
patent: 6651096 (2003-11-01), Gai et al.
patent: 6658002 (2003-12-01), Ross et al.
patent: 6671811 (2003-12-01), Diep et al.
patent: 6680998 (2004-01-01), Bell et al.
patent: 6684331 (2004-01-01), Srivastava
patent: 6941467 (2005-09-01), Judge et al.
patent: 6965574 (2005-11-01), Cook et al.
patent: 7124440 (2006-10-01), Poletto et al.
patent: 2001/0051865 (2001-12-01), Kerr et al.
patent: 2002/0129140 (2002-09-01), Peled et al.
patent: 2003/0002436 (2003-01-01), Anderson et al.
patent: 2003/0041153 (2003-02-01), Sharma
patent: 2003/0105866 (2003-06-01), Colrain et al.
patent: 2003/0105867 (2003-06-01), Colrain et al.
patent: 2003/0105993 (2003-06-01), Colrain et al.
patent: 2003/0123421 (2003-07-01), Feige et al.
patent: 2003/0149783 (2003-08-01), McDaniel
patent: 2003/0182433 (2003-09-01), Kulkarni et al.
patent: 2003/0191966 (2003-10-01), Gleichauf et al.
patent: 2003/0217145 (2003-11-01), Leung et al.
patent: 2003/0217180 (2003-11-01), Chandra et al.
patent: 2003/0224788 (2003-12-01), Leung et al.
patent: 2003/0236827 (2003-12-01), Patel et al.
patent: 2004/0008682 (2004-01-01), Miriyala
patent: 2004/0034871 (2004-02-01), Lu et al.
patent: 2004/0073810 (2004-04-01), Dettinger et al.
patent: 2004/0088583 (2004-05-01), Yoon et al.
patent: 2004/0093513 (2004-05-01), Cantrell et al.
patent: 2004/0098623 (2004-05-01), Scheidell
patent: 2004/0250133 (2004-12-01), Lim
Cisco Systems, Inc., “Release Notes for Cisco Content Routing Software, Release 1.1,” 1992-2002, http://www.cisco.com/univercd/cc/td/doc/product/webscale/cr/cr4430/cr—llrn.htm, data retrieved Feb. 11, 2004, pp. 1-19.
Cisco Systems, Inc., “IP Source Tracker,” 2003, http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s21/ipst.htm, data retrieved Feb. 11, 2004, pp. 1-15.
Cisco Systems, Inc., “Configuring Denial of Service Protection,” 1992-2003, http://www.cisco.com/univercd/cc/td/doc/product/core/cis/7600/software/121e/swcg/dos.htm, data retrieved Feb. 11, 2004, pp. 1-7.
Cisco Systems, Inc., “Cisco IOS Software Release 12.3(4)T: New Security Features and Hardware,” 1992-2003, http://www.cisco.com/warp/public/cc/pd/iosw/prodlit/2358—pp.htm, data retrieved Feb. 11, 2004, pp. 1-11.
Cisco Systems, Inc., “Characterizing and Tracing Packet Floods Using Cisco Routers,” 1992-2003, http://www.cisco.com/warp/public/707/22.html, data retrieved Feb. 11, 2004, pp. 1-9.
Cisco Systems, Inc., “Release Notes for Cisco Cache Engine 500 Series, Software Version 2.1.0,” 1992-2002, http://www.cisco.com/univercd/cc/td/doc/product/webscale/webcache/ce21/rn—ce21.htm, data retrieved Feb. 11, 2004, pp. 1-11.
Cisco Systems, Inc., “SAFE Nimda Attack Mitigation,” 1992-2003, http://www.cisco.com/warp/public/cc/so/cuso/epso/sqfr/snam—wp.htm, data retrieved Feb. 11, 2004, pp. 1-6.
Cisco Systems, Inc., “Cisco IOS Software Release 11.3 New Features,” 1992-2002, http://www.cisco.com/warp/public/cc/pd/iosw/iore/iore113/prodlit/706—pp.htm, data retrieved Feb. 11, 2004, pp. 1-45.
Cisco Systems, Inc., “Monitoring the System,” Chapter 2, Cisco ICS 7750 Administration and Troubleshooting Guide, 1992-2002, http://www.cisco.com/univercd/cc/td/doc/product/voice/ics7750/tblshoot/monitor.htm, data retrieved Feb. 11, 2004, pp. 2-1—2-28.
Cisco Systems, Inc., “Monitoring,” Chapter 13, VPN 3002 Hardware Client User Guide, 1989-2000, http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpn3002/3—0/user—gd/monitor.htm, data retrieved Feb. 11, 2004, pp. 13-1—13-47.
Cisco Systems, Inc., “Security Reference Information,” 1992-2003, http://www.cisco.com/warp/public/707/ref.html, data retrieved Feb. 11, 2004, pp. 1-3.
Cisco Systems, Inc., “Cisco Security Advisory: TCP Loopback DoS Attack (land.c) and Cisco Devices,” 1992-2003, http://www.cisco.com/warp/public/770/land-pub.shtml, data retrieved Feb. 11, 2004, pp. 1-9.
Cisco Systems, Inc., “Network Security Policy: Best Practices White Paper,” 1992-2003, http://www.cisco.com/warp/public/126/secpol.html, data retrieved Feb. 11, 2004, pp. 1-7.
Cisco Systems, Inc., “Protecting Your Core: Infrastructure Protection Access Control Lists,” 1992-2003, 10 pages.
Cisco Systems, Inc., “Configuring Denial of Service Protection,” Chapter 24, Catalyst 6500 Series Switch Cisco IOS Software Configuration Guide—Release 12.1E Guide, pp. 24-1—24-8.
International Searching Authority, “Notification of Transmittal of the International Search Report or the Declaration,” PCT/US04/33828, dated Oct. 13, 2004, 13 pages.
Current Claims, PCT/US04/33828, 7 pages.

Affiliated with

Also associated with

Rating

Policy-based network security management does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Policy-based network security management, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Policy-based network security management will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3836703