Patent · US Expired

Parallel intrusion detection sensors with load balancing for high speed networks

US6954775B1 · kind B1 · utility

76Cited by
64References
14Claims
0Family size

Assignee

Inventors

Key dates

Filing dateDec 30, 2002
Grant dateOct 11, 2005
Priority date
Expiry dateApr 14, 2023

Classification

  • Technology area (CPC H)Electricity
  • CPC primaryH04L67/1001
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

Various embodiments of a method and system for detecting unauthorized signatures to or from a local network. Multiple sensors are connected at an internetworking device, which can be a router or a switch. The sensors operate in parallel and each receives a portion of traffic through the internetworking device, at a session-based level or at a lower (packet-based) level. Depending on the type of internetworking device (router or switch) the load balancing mechanism that distributes the packets can be internal or external to the internetworking device. Also depending on the level of packet distribution (session-based or packet-based), the sensors share a network analyzer (if session-based) or both a network analyzer and a session analyzer (if packet-based).

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.