Patent · US Active

Intrusion detection system for automated determination of IP addresses

US10897483B2 · kind B2 · utility

0Cited by

6References

20Claims

0Family size

Assignee

International Business Machines Corporation · US

Inventors

Dirk Harz · Kassel, DE
Matthias Seul · Kassel, DE
Jens Thamm · Kassel, DE
Gideon Zenz · Kassel, DE

Key dates

Filing date	Aug 10, 2018
Grant date	Jan 19, 2021
Priority date	—
Expiry date	Jan 6, 2039

Classification

Technology area (CPC H)Electricity
CPC primaryH04L2463/146
WIPO fieldDigital communication
WIPO sectorElectrical engineering

Abstract

A method for automated determination of IP address information of malicious attacks. An intrusion detection system may receive an index tree for storing IP addresses in one or more nodes of the index tree in a predefined sorting order. The instruction detection system may receive a data structure including a first set of one or more IP addresses from a honeypot system. The intrusion detection may receive unstructured data indicative of a second set of one or more IP addresses from a predefined data source. The intrusion detection system may process the unstructured data to determine the second set of one or more IP addresses. The intrusion detection system may insert each IP address of the first and second sets of one or more IP addresses into one or more nodes of the index tree.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.