Parallel intrusion detection sensors with load balancing for high speed networks
US6578147B1 · kind B1 · utility
Assignee
Inventors
Key dates
| Filing date | Jan 15, 1999 |
| Grant date | Jun 10, 2003 |
| Priority date | — |
| Expiry date | Jan 15, 2019 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L67/1001
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Various embodiments of a method and system for detecting unauthorized signatures to or from a local network. Multiple sensors are connected at an internetworking device, which can be a router or a switch. The sensors operate in parallel and each receives a portion of traffic through the internetworking device, at a session-based level or at a lower (packet-based) level. Depending on the type of internetworking device (router or switch) the load balancing mechanism that distributes the packets can be internal or external to the internetworking device. Also depending on the level of packet distribution (session-based or packet-based), the sensors share a network analyzer (if session-based) or both a network analyzer and a session analyzer (if packet-based).
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.