System and method for analyzing logfiles
OwnerStephen Sorkin, Michael Lyle +2inventors
InventorsStephen Sorkin, Michael Lyle, Robert F. Ross, James R. Maricondo
Life of this patent
Estimating the term…
Abstract
A system and method are disclosed for providing security for a computer network. Content sets are generated for a computer associated with the network. It is determined whether a user should be routed to the generated content sets. If it is determined that the user should be routed to the generated content sets, a generated content set is selected and the user is so routed. Various actions and events may be recorded in a logfile, and the logfile is analyzed using regular expressions.
Claims36
A method for analyzing a logfile produced by a computer network security system, comprising:
- providing a regular expression query associated with a pattern to be searched for in the logfile;
- and
- using the query to search for the pattern in the logfile.
A method for providing security for a computer network, comprising:
- generating content sets for a computer associated with the network;
- determining whether a user should be routed to the generated content sets;
- selecting one of the content sets if it is determined that the user should be routed to the generated content sets;
- routing the user to the selected generated content set;
- producing a logfile of at least a portion of the user's activity with respect to the computer;
- and
- using at least one regular expression query to analyze the logfile.
A system for analyzing a logfile produced by a computer network security system, comprising:
- a storage including a regular expression query associated with a pattern to be searched for in the logfile;
- and
- a processor configured to use the query to search for the pattern in the logfile.
A system for providing security for a computer network, comprising:
- a computer configured to generate content for the computer, wherein the computer is associated with the network;
- a network device configured to determine whether a user should be routed to the generated content and to route the user to the generated content if it is determined that the user should be routed to the generated content;
- a logging mechanism configured to produce a logfile of at least a portion of the user's activities with respect to the generated content;
- and
- a storage including a regular expression query usable by the computer to search the logfile for a pattern associated with the regular expression query.
A computer program product for analyzing a logfile produced by a computer network security system, comprising a computer usable medium having machine readable code embodied therein for
- providing a regular expression query associated with a pattern to be searched for in the logfile;
- and
- using the query to search for the pattern in the logfile.
A computer program product for providing security for a computer network, comprising a computer usable medium having machine readable code embodied therein for
- generating content sets for a computer associated with the network;
- determining whether a user should be routed to the generated content sets;
- selecting one of the content sets if it is determined that the user should be routed to the generated content sets;
- routing the user to the selected generated content set;
- producing a logfile of at least a portion of the user's activity with respect to the computer;
- and
- using at least one regular expression query to analyze the logfile.
Dependencies are inferred from the claim text.