Intrusion detection and remediation based on type of intrusion
AssigneeDell Products L.P.
InventorsTrupti Ghate, Piyush Tibrewal
Life of this patent
Estimating the term…
Abstract
An example methodology includes, by a computing device, preparing remediation materials for use in remediating an intrusion on a resource of a computing system, monitoring the resource for intrusions, and detecting an intrusion on the resource based on the monitoring. The method also includes, responsive to a determination that the intrusion on the resource is an illegitimate intrusion, by the computing device, identifying at least one rule to execute to remediate the intrusion on the resource and running the identified at least one rule to remediate the intrusion on the resource, wherein the at least one rule defines one or more actions to sanitize the resource based on the remediation materials.
Claims20
A method comprising:
- preparing, by a computing device, remediation materials for use in remediating an intrusion on a resource of a computing system;
- monitoring, by the computing device, the resource for intrusions;
- detecting, by the computing device, an intrusion on the resource based on the monitoring;
- and
- responsive to a determination that the intrusion on the resource is an illegitimate intrusion, by the computing device:
- identifying at least one rule to execute to remediate the intrusion on the resource;
- and
- running the identified at least one rule to remediate the intrusion on the resource, wherein the at least one rule defines one or more actions to sanitize the resource based on the remediation materials.
A computing device comprising:
- one or more non-transitory machine-readable mediums configured to store instructions;
- and
- one or more processors configured to execute the instructions stored on the one or more non-transitory machine-readable mediums, wherein execution of the instructions causes the one or more processors to carry out a process comprising:
- preparing remediation materials for use in remediating an intrusion on a resource of a computing system;
- monitoring the resource for intrusions;
- detecting an intrusion on the resource based on the monitoring;
- and
- responsive to a determination that the intrusion on the resource is an illegitimate intrusion, running at least one rule to remediate the intrusion on the resource, wherein the at least one rule defines one or more actions to sanitize the resource based on the remediation materials.
A non-transitory machine-readable medium encoding instructions that when executed by one or more processors cause a process to be carried out, the process including:
- preparing remediation materials for use in remediating an intrusion on a resource of a computing system;
- monitoring the resource for intrusions;
- detecting an intrusion on the resource based on the monitoring;
- and
- responsive to a determination that the intrusion on the resource is an illegitimate intrusion, running at least one rule to remediate the intrusion on the resource, wherein the at least one rule defines one or more actions to sanitize the resource based on the remediation materials.
Dependencies are inferred from the claim text.