Network security system and method using a parallel finite state machine adaptive active monitor and responder

US5414833A · kind A · utility

Assignee

• International Business Machines Corporation · US

Inventors

• Paul C. Hershey · Ashburn, US
• Donald B. Johnson · Manassas, US
• An V. Le · Manassas, US
• Stephen M. Matyas · Manassas, US
• John G. Waclawsky · Frederick, US
• John D. Wilkins · Somerville, US

Key dates

• Filing date: Oct 27, 1993
• Grant date: May 9, 1995
• Expiry date: Oct 27, 2013

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F11/327
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

A system and method provide a security agent, consisting of a monitor and a responder, that respond to a detected security event in a data communications network, by producing and transmitting a security alert message to a network security manager. The alert is a security administration action which includes setting a flag in an existing transmitted protocol frame to indicate a security event has occurred. The security agent detects the transmission of infected programs and data across a high-speed communications network. The security agent includes an adaptive, active monitor using finite state machines, that can be dynamically reprogrammed in the event it becomes necessary to dynamically reconfigure it to provide real time detection of the presence of a suspected offending virus.