Multi-Stage Deep Packet Inspection for Lightweight Devices

A system for inspecting packets to detect an attempt at subverting an information processing system, comprising:

• a device embedded in an information processing component, said embedded device including:
• a first processor;
• and
• a first memory in communication with said first processor, said first memory for storing a first plurality of processing instructions for directing said first processor to
• (a) determine if a first signature of a received packet matches a signature of a known worm or virus;
• (b) determine if a second signature of the received packet matches a signature of a known application;
• (c) determine if a third signature of the received packet matches a signature of a known intrusion packet;
• and
• (d) if a match is found in any of the above determinations, sending the received packet to a central verification facility for further analysis.

A computer program product comprising a computer useable medium having control logic stored therein for causing a computer to detect an attempt at subverting an information processing system, the control logic comprising:

• a first computer readable program code means for causing the computer to determine if a first signature of a received packet matches a signature of a known worm or virus;
• a second computer readable program code means for causing the computer to determine if a second signature of the received packet matches a signature of a known application;
• a third computer readable program code means for causing the computer to determine if a third signature of the received packet matches a signature of a known intrusion packet;
• and
• a fourth computer readable program code means for causing the computer to send the received packet to a central verification facility for further analysis, if a match is found in any of the above determinations.