Method and apparatus for verifying the integrity and security of computer networks and implementing counter measures

A network security system for a target network of computers comprising:

• at least one detection means associated with said target network, said detection means configured to generate event messages when said computer is under an attack;
• a master security system located outside said network;
• and
• a secure link between said detection means and said master security system enabling data communication therebetween;
• wherein said at least one detection means further comprises means for collecting said event messages and means for analyzing said event messages, and wherein said detection means uploads certain event messages to said master security system through said secure link.

A method for monitoring the integrity of a computer associated with a detection means, said computer being connected to a computer network and said detection means configured to detect an attack on said computer, said method comprising the steps of:

• establishing a secure link for the transfer of data between said detection means and a master security system hierarchically independent from said detection means collecting data related to said attack;
• analyzing said collected data related to said attack;
• uploading certain analyzed data to said master security system over said secure link;
• and
• countering said attack.

A method for monitoring the integrity of a target computer network associated with a detection means, said detection means configured to detect an attack on said target computer network, said method comprising the steps of:

• establishing a secure link for the transfer of data between said detection means and a master system hierarchically independent from said detection means
• collecting data related to said attack;
• analyzing data related to said attack;
• uploading certain analyzed data to said master security system over said secure link;
• and
• countering said attack.