Loading patent…
AssigneeDNSStuff, INC.
InventorsCharles K. Stefanidakis, Richard Person, Anish Dhanda, Gregory Sabatino, John J. Donovan
Estimating the term…
This invention is a system, method, and apparatus for detecting compromise of IP devices that make up an IP-based network. One embodiment is a method for detecting and alerting on the following conditions: (1) Denial of Service Attack; (2) Unauthorized Usage Attack (for an IP camera, unauthorized person seeing a camera image); and (3) Spoofing Attack (for an IP camera, unauthorized person seeing substitute images). A survey of services running on the IP device, historical benchmark data, and traceroute information may be used to detect a possible Denial of Service Attack. A detailed log analysis and a passive DNS compromise system may be used to detect a possible unauthorized usage. Finally, a fingerprint (a hash of device configuration data) may be used as a private key to detect a possible spoofing attack. The present invention may be used to help mitigate intrusions and vulnerabilities in IP networks.
A vulnerability detection and alerting system for detecting compromise of one or more IP devices on an IP network, the system comprising:
A method of detecting and alerting on possible IP network compromise, comprising the steps of:
A system for detecting and alerting on possible compromise of an IP network having one or more IP devices, the system comprising:
Dependencies are inferred from the claim text.