Retrieving Network Packets Corresponding to Detected Abnormal Application Activity
AssigneeInternational Business Machines Corporation
InventorsKuo-Chun Chen, Chih-Hung Chou, Wei-Hsiang Hsiung, Sheng-Tung Hsu
Life of this patent
Estimating the term…
Abstract
A system and computer program product for preventing abnormal application activity is provided. Packets are retrieved from a packet buffer using packet location information corresponding to information associated with the abnormal application activity in a data processing system. The packets are analyzed to identify content of the network packets causing the abnormal application activity. Network packets containing the content causing the abnormal application activity in the data processing system are blocked.
Claims10
1-11. (canceled)
A data processing system for preventing abnormal application activity, the data processing system comprising:
- a bus system;
- a storage device connected to the bus system, wherein the storage device stores program instructions;
- and
- a processor connected to the bus system, wherein the processor executes the program instructions to:
- retrieve packets from a packet buffer using packet location information corresponding to information associated with the abnormal application activity in the data processing system;
- analyze the packets to identify content of the packets causing the abnormal application activity;
- and
- block network packets containing the content causing the abnormal application activity in the data processing system.
A computer program product for preventing abnormal application activity, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a data processing system to cause the data processing system to perform a method comprising:
- retrieving, by the data processing system, packets from a packet buffer using packet location information corresponding to information associated with the abnormal application activity in the data processing system;
- analyzing, the data processing system, the packets to identify content of the packets causing the abnormal application activity;
- and
- blocking, by the data processing system, network packets containing the content causing the abnormal application activity in the data processing system.
Dependencies are inferred from the claim text.