Loading patent…
AssigneeCisco Technology, Inc.
InventorsKarthikeyan Sadhasivam, Shuguang Zhang, Ravi Varanasi
Estimating the term…
An intrusion detection system for a computer network includes a knowledge database that contains a baseline of normal host behavior, and a correlation engine that monitors network activity with reference to the knowledge database. The correlation engine accumulating information about anomalous events occurring on the network and then periodically correlating the anomalous events. The correlation engine generates a worm outbreak alarm when a certain number of hosts exhibit a role-reversal behavior. It is emphasized that this abstract is provided to comply with the rules requiring an abstract that will allow a searcher or other reader to quickly ascertain the subject matter of the technical disclosure. It is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims.
An intrusion detection system (IDS) for a network that includes a plurality of hosts, comprising:
An intrusion detection system (IDS) for a network that includes a plurality of hosts, comprising:
A computer-implemented method for discovering a worm outbreak on a network comprising:
A computer-implemented method for real-time discovery/mitigation of a worm outbreak on a network comprising:
A computer program product comprising a computer useable medium and computer-readable code embodied on the computer useable medium, execution of the computer readable code causing a computer network device to:
A computer program product comprising a computer useable medium and computer-readable code embodied on the computer useable medium, execution of the computer readable code causing a computer network device to:
Dependencies are inferred from the claim text.