专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08046833B2 Intrusion event correlation with network discovery information 有权
标题翻译：入侵事件与网络发现信息的相关性
公开(公告)号：US08046833B2
公开(公告)日：2011-10-25
申请号：US11272035
申请日：2005-11-14
申请人： Eric Gustafson , Brian P. Rittermann
发明人： Eric Gustafson , Brian P. Rittermann
IPC分类号： G06F12/14
CPC分类号： H04L63/1416 , H04L63/20
摘要： A policy component includes policy configuration information. The policy configuration information contains one or more rules. Each rule and group of rules can be associated with a set of response actions. As the nodes on the monitored networks change or intrusive actions are introduced on the networks, network change events or intrusion events are generated. The policy component correlates network change events and/or intrusions events with network map information. The network map contains information on the network topology, services and network devices, amongst other things. When certain criteria is satisfied based on the correlation, a policy violation event may be issued by the system resulting in alerts or remediations.
摘要翻译：策略组件包括策略配置信息。策略配置信息包含一个或多个规则。每个规则和规则组可以与一组响应动作相关联。随着监控网络上的节点在网络上引入变化或引入动作，就会生成网络变化事件或入侵事件。策略组件将网络变化事件和/或入侵事件与网络地图信息相关联。网络地图包含网络拓扑，服务和网络设备等信息。当基于相关性满足某些标准时，系统可能会发出策略冲突事件，从而导致警报或补救。

2. 发明申请

US20080244741A1 Intrusion event correlation with network discovery information 有权
标题翻译：入侵事件与网络发现信息的相关性
公开(公告)号：US20080244741A1
公开(公告)日：2008-10-02
申请号：US11272035
申请日：2005-11-14
申请人： Eric Gustafson , Brian P. Rittermann
发明人： Eric Gustafson , Brian P. Rittermann
IPC分类号： G06F21/00
CPC分类号： H04L63/1416 , H04L63/20
摘要： A policy component comprises policy configuration information. The policy configuration information contains one or more rules. Each rule and group of rules can be associated with a set of response actions. As the nodes on the monitored networks change or intrusive actions are introduced on the networks, network change events or intrusion events are generated. The policy component correlates network change events and/or intrusions events with network map information. The network map contains information on the network topology, services and network devices, amongst other things. When certain criteria is satisfied based on the correlation, a policy violation event may be issued by the system resulting in alerts or remediations.
摘要翻译：策略组件包括策略配置信息。策略配置信息包含一个或多个规则。每个规则和规则组可以与一组响应动作相关联。随着监控网络上的节点在网络上引入变化或引入动作，就会生成网络变化事件或入侵事件。策略组件将网络变化事件和/或入侵事件与网络地图信息相关联。网络地图包含网络拓扑，服务和网络设备等信息。当基于相关性满足某些标准时，系统可能会发出策略违规事件，从而导致警报或补救措施。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式