Method and system for adaptive network security using network vulnerability assessment

A method for adaptive network security comprising:

• directing, by a device coupled to a network, a request onto the network;
• assessing a response to the request to discover network information associated with determining at least one potential network vulnerability;
• prioritizing a plurality of protocol analyses to be performed on network data traffic which is monitored, the protocol analyses for identifying attacks upon the network;
• monitoring a processor utilization of processor resources;
• monitoring memory utilization of memory resources;
• disabling a particular protocol analysis based upon an assigned priority if the processor utilization exceeds a first defined threshold;
• and
• disabling a particular protocol analysis based upon an assigned priority if the memory utilization exceeds a third defined threshold.

A method for adaptive network security comprising:

• directing, by a device coupled to a network, a request onto the network;
• assessing a response to the request to discover network information associated with determining at least one potential network vulnerability;
• prioritizing a plurality of comparisons between network data traffic which is monitored and a plurality of attack signatures, the attack signatures for identifying attacks upon the network;
• monitoring a processor utilization of processor resources;
• monitoring memory utilization of memory resources;
• disabling a particular attack signature based upon an assigned priority if the processor utilization exceeds a first defined threshold;
• and
• disabling a particular attack signature based upon an assigned priority if the memory utilization exceeds a third defined threshold.

A system for adaptive network security comprising:

• a scan engine coupled to a network, the scan engine for directing a request onto a network and assessing a response to the request to discover network information associated with determining at least one potential network vulnerability;
• and
• a protocol engine coupled to the network, the protocol engine for performing a plurality of protocol analyses on network data traffic to identify attacks upon the network;
• a signature engine coupled to the network, the signature engine for comparing the network data traffic to a plurality of attack signatures to identify attacks upon the network;
• and
• a priority engine coupled to the analysis engine, the protocol engine, and the signature engine, the priority engine for prioritizing the plurality of protocol analyses and the plurality of attack signatures based upon the network information.

A system for adaptive network security comprising:

• software embodied in system-readable storage and operable to:
• direct, by a device coupled to a network, a request onto the network;
• assess a response to the request to discover network information associated with determining at least one potential network vulnerability;
• and
• prioritize a plurality of analysis tasks based upon the network information, the plurality of analysis tasks to be performed on network data traffic which is monitored in order to identify attacks upon the network.

A system for adaptive network security comprising:

• software embodied in system-readable storage and operable to:
• direct, by a device coupled to a network, a request onto the network;
• assess a response to the request to discover network information associated with determining at least one potential network vulnerability;
• prioritize a plurality of protocol analyses to be performed on network data traffic which is monitored, the protocol analyses for identifying attacks upon the network;
• monitor a processor utilization of processor resources;
• monitor memory utilization of memory resources;
• disable a particular protocol analysis based upon an assigned priority if the processor utilization exceeds a first defined threshold;
• and
• disable a particular protocol analysis based upon an assigned priority if the memory utilization exceeds a third defined threshold.

A system for adaptive network security comprising:

• software embodied in system-readable storage and operable to:
• direct, by a device coupled to a network, a request onto the network;
• assess a response to the request to discover network information associated with determining at least one potential network vulnerability;
• prioritize a plurality of comparisons between network data traffic which is monitored and a plurality of attack signatures, the attack signatures for identifying attacks upon the network;
• monitor a processor utilization of processor resources;
• monitor memory utilization of memory resources;
• disable a particular attack signature based upon an assigned priority if the processor utilization exceeds a first defined threshold;
• and
• disable a particular attack signature based upon an assigned priority if the memory utilization exceeds a third defined threshold.

A system for adaptive network security comprising:

• means for directing, by a device coupled to a network, a request onto the network;
• means for assessing a response to the request to discover network information associated with determining at least one potential network vulnerability;
• and
• means for prioritizing a plurality of analysis tasks based upon the network information, the plurality of analysis tasks to be performed on network data traffic which is monitored in order to identify attacks upon the network.