Systems and methods for correlating and distributing intrusion alert information among collaborating computer systems

Systems and methods for correlating and distributing intrusion alert information among collaborating computer systems are provided. These systems and methods provide an alert correlator and an alert distributor that enable early signs of an attack to be detected and rapidly disseminated to collaborating systems. The alert correlator utilizes data structures to correlate alert detections and provide a mechanism through which threat information can be revealed to other collaborating systems. The alert distributor uses an efficient technique to group collaborating systems and then pass data between certain members of those groups according to a schedule. In this way data can be routinely distributed without generating excess traffic loads.

Attached files:
US 7784097.jpg

Patents:
US 7,784,097

Inventor(s): STOLFO SALVATORE J [US]; KEROMYTIS ANGELOS D [US]; MISRA VISHAL [US]; LOCASTO MICHAEL E [US]; PAREKH JANAK [US]

Type of Offer: Licensing



Next Patent »
« More Computer Science Patents
« More Communications Patents

Share on      


CrowdSell Your Patent