Detecting a Remote Exploitation Attack
AssigneeF-Secure Corporation
InventorMikko SUOMINEN
Life of this patent
Estimating the term…
Abstract
A method of protecting a computer system against remote exploitation attacks performed over a network to which the computer system is connected. The method includes: a) identifying a network connection that is not associated with a successful authentication and which carries a traffic level in excess of a predefined threshold; b) reporting the identified network connection as a real or potential remote exploitation attack; and c) taking an action or actions to mitigate against the real or potential remote exploitation attack.
Claims13
A method of protecting a computer system against remote exploitation attacks performed over a network to which the computer system is connected, the method comprising:
- a) identifying a network connection that is not associated with a successful authentication and which carries a traffic level in excess of a predefined threshold;
- b) reporting the identified network connection as a real or potential remote exploitation attack;
- and
- c) taking an action or actions to mitigate against the real or potential remote exploitation attack.
Apparatus for protecting a computer system against remote exploitation attacks performed over a network to which the computer system is connected, the apparatus being configured to:
- a) identify a network connection that is not associated with a successful authentication and which carries a traffic level in excess of a predefined threshold;
- b) report the identified network connection as a real or potential remote exploitation attack;
- and
- c) take an action or actions to mitigate against the real or potential remote exploitation attack.
Dependencies are inferred from the claim text.