Information security – Monitoring or scanning of software or data including attack... – Intrusion detection
Reexamination Certificate
2004-10-14
2009-12-08
Truong, Thanhnga B (Department: 2438)
Information security
Monitoring or scanning of software or data including attack...
Intrusion detection
C726S022000, C726S024000, C709S223000, C709S224000, C709S229000
Reexamination Certificate
active
07631355
ABSTRACT:
A system for identifying extreme behavior in elements of a network comprises a profiler and a collator. The profiler and the collator perform a method of identifying extreme behavior in the network elements. The profiler maintains one or more group profiles of network elements. Each group profile is associated with a plurality of network elements. The profiler accumulates values of a first function of the contents of an input data stream over a first period of time for each group profile. The input data stream includes at least one field containing a network element reference. The accumulated values of each group profile are compared with a corresponding collation threshold. The collator creates a collation instance for each group profile that reaches the collation threshold. Each collation instance creates a plurality of collation profiles. Each collation profile is associated with one or more network elements from the plurality of network elements corresponding to the group profile that caused the creation of the collation instance. The collator instance accumulates values of a second function of the contents of the input data stream for each collation profile over a second period of time. Extreme behavior of network elements is identified from the accumulated values of the collation profiles.
REFERENCES:
patent: 6073089 (2000-06-01), Baker et al.
patent: 6148065 (2000-11-01), Katz
patent: 6298454 (2001-10-01), Schleiss et al.
patent: 6324656 (2001-11-01), Gleichauf et al.
patent: 6473505 (2002-10-01), Khuc et al.
patent: 6499059 (2002-12-01), Banzhaf
patent: 6567409 (2003-05-01), Tozaki et al.
Bolt George
Manslow John
Cerebrus Solutions Limited
Knobbe Martens Olson & Bear LLP
Truong Thanhnga B
LandOfFree
System and method for identifying extreme behavior in... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with System and method for identifying extreme behavior in..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and System and method for identifying extreme behavior in... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-4135565