Methods and Systems for Protecting Computer Networks by Modulating Defenses
AssigneePacketViper LLC
InventorFrancesco Trama
Life of this patent
Estimating the term…
Abstract
A network security system protects a computer network by evaluating all incoming data packets with one or more triggers to determine whether the incoming data packets are suspect data packets or acceptable data packets. The system changes the triggers and sensors that incoming packets encounter according to a programmable schedule, which makes attackers confused and uncertain about the network. When suspect data packets are encountered, the system performs one or more protective actions with respect to the suspect data packet. Some of these actions include logging, allowing, delaying, blocking, redirecting, and trapping the suspect data packets.
Claims20
A computer-implemented method for providing security to a protected computer network having communication ports, the computer-implemented method comprising:
- receiving, on a network security device, incoming data packets that are addressed to the protected computer network;
- evaluating the incoming data packets with one or more triggers to determine whether the incoming data packets are suspect data packets or acceptable data packets;
- changing the one or more triggers that evaluate the incoming data packets over time according to a schedule;
- and
- performing one or more protective actions on the suspect data packets;
- and
- allowing the acceptable data packets to access the communication ports.
A network security system for protecting a computer network having communication ports from attackers attempting to access those ports, the network security system comprising:
- at least one processor configured to execute computer-executable instructions and memory storing computer-executable instructions, the instructions configured to implement:
- a security device having one or more triggers configured to evaluate incoming data packets addressed to the computer network to determine whether the incoming data packets are suspect data packets or acceptable data packets, wherein the triggers are changeable over time.
Dependencies are inferred from the claim text.