Method and system for adaptive network security using intelligent packet analysis
AssigneeCisco Technology, Inc.
InventorsRobert E. Gleichauf, Daniel M. Teal, Kevin L. Wiley
Life of this patent
Estimating the term…
Abstract
A method and system for adaptive network security using intelligent packet analysis are provided. The method comprises monitoring network data traffic. The network data traffic is analyzed to assess network information. A plurality of analysis tasks are prioritized based upon the network information. The analysis tasks are to be performed on the monitored network data traffic in order to identify attacks upon the network.
Claims46
Logic for adaptive network security using intelligent packet analysis, the logic encoded in media and operable to:
- monitor network data traffic;
- analyze the network data traffic to assess network information;
- prioritize a plurality of analysis tasks based upon the network information, the analysis tasks to be performed on the monitored network data traffic in order to identify attacks upon the network, the plurality of analysis tasks includes a plurality of comparisons between the monitored network data traffic and a plurality of attack signatures;
- and
- disable a particular attack signature based upon an assigned priority of the particular attack signature.
A computer implemented system for adaptive network security using intelligent packet analysis, comprising:
- means for monitoring network data traffic;
- means for analyzing the network data traffic to assess network information;
- means for prioritizing a plurality of analysis tasks based upon the network information, the analysis tasks to be performed on the monitored network data traffic in order to identify attacks upon the network, the plurality of analysis tasks includes a plurality of comparisons between the monitored network data traffic and a plurality of attack signatures;
- and
- means for disabling a particular attack signature based upon an assigned priority of the particular attack signature.
Logic for adaptive network security using intelligent packet analysis, the logic encoded in media and operable to:
- monitor network data traffic, the network data traffic comprising packets;
- analyze the network data traffic to assess network information;
- prioritize a plurality of analysis tasks based upon the network information, the analysis tasks to be performed on the monitored network data traffic in order to identify attacks upon the network, the plurality of analysis tasks includes a plurality of comparisons between the monitored network data traffic and a plurality of attack signatures;
- and
- disable a particular attack signature based upon an assigned priority of the particular attack signature.
Logic for adaptive network security using intelligent packet analysis, the logic encoded in media and operable to:
- monitor network data traffic;
- analyze the network data traffic to assess network information;
- prioritize a plurality of protocol analyses to be performed on monitored traffic from the network, the protocol analyses for identifying attacks upon the network;
- monitor a processor utilization;
- monitor memory utilization;
- disable a particular protocol analysis based upon an assigned priority if the processor utilization exceeds a first defined threshold;
- and
- disable a particular protocol analysis based upon an assigned priority if the memory utilization exceeds a third defined threshold.
Logic for adaptive network security using intelligent packet analysis, the logic encoded in media and operable to:
- monitor network data traffic;
- analyze the network data traffic to assess network information;
- prioritize a plurality of comparisons between monitored network data traffic and a plurality attack signatures based upon the network information, the attack signatures for identifying attacks upon the network;
- monitor a processor utilization;
- monitor memory utilization;
- disable a particular attack signature based upon an assigned priority if the processor utilization exceeds a first defined threshold;
- and
- disable a particular attack signature based upon an assigned priority if the memory utilization exceeds a third defined threshold.
Logic for adaptive network security using intelligent packet analysis, the logic encoded in media and operable to:
- monitor network data traffic, the network data traffic comprising packets;
- analyze the network data traffic to assess network information;
- prioritize a plurality of protocol analyses to be performed on monitored traffic from the network, the protocol analyses for identifying attacks upon the network;
- monitor a processor utilization;
- monitor memory utilization;
- disable a particular protocol analysis based upon an assigned priority if the processor utilization exceeds a first defined threshold;
- and
- disable a particular protocol analysis based upon an assigned priority if the memory utilization exceeds a third defined threshold.
Dependencies are inferred from the claim text.