Method and system of alerting internet service providers that a hacker may be using their system to gain access to a target system
AssigneeEricsson Inc.
InventorLars A. Tovander
Life of this patent
Estimating the term…
Abstract
Provided is a method and system for alerting an Internet service provider (ISP) having a server, or an Internet Connected Computer (ICC), that a potential hacker may be using it to attempt to access a target. The method detects a hacking event at the target, and reports the hacking event to a server located outside the target. The server may then report the hacking activity, including the identity of the hacker, to the target system's administrator, or another party, such as government entities. The system, which may be implemented as software, uses a monitor module and an action module to alert an Internet service provider that a hacker may be using it to attempt access to a target.
Claims21
A method of detecting and reporting a hacking event on a network, comprising the steps of:
- detecting a hacking event at a targeted system connected to said network;
- determining a network path between said targeted system and an originating system that generated said hacking event;
- tagging a packet from said originating system;
- and
- sending a first message backward via the path traversed by said hacking event, and each connected server between said originating system and said targeted system receives and passes said first message to the next server in the path until reaching a server providing an access point for said originating system,
- wherein said first message includes information regarding said hacking event.
A computer program within a computer usable medium for detecting and reporting a hacking event on a network, comprising:
- a monitoring module for detecting a hacking event at a targeted system connected to said network;
- and
- an action module responsive to an output from said monitoring module for
- determining a network path between said targeted system and an originating system that generated said hacking event;
- tagging a packet from said originating system;
- and
- sending a first message backward via the path traversed by said hacking event, wherein each connected server between said originating system and said targeted system receives and passes said first message to the next server in the path until reaching a server providing an access point for said originating system,
- wherein said first message includes information regarding said hacking event.
A system for providing security to a user of the Internet, comprising:
- a monitor for detecting and reporting a hacking event on a network,
- a computer program associated with said monitor for:
- detecting a hacking event at a targeted system connected to the Internet;
- determining a network path between said targeted system and an originating system that generated said hacking event;
- tagging a packet from said originating system;
- sending a first message backward via the path traversed by said hacking event, and each connected server between said originating system and said targeted system receives and passes said first message to the next server in the path until reaching a server providing an access point for said originating system,
- wherein said first message Includes information regarding said hacking even;
- and
- responsive to receiving said first message said server associated with said originating system sending a second message forward along said network path containing information regarding said originating system.
Dependencies are inferred from the claim text.