Security event aggregation at software agent
US7644438B1 · kind B1 · utility
161Cited by
36References
30Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Oct 27, 2004 |
| Grant date | Jan 5, 2010 |
| Priority date | — |
| Expiry date | Oct 31, 2026 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/1416
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A network security system can have a plurality of distributed software agents configured to collect security events from network devices. In one embodiment, the agents are configured to aggregate the security events. In one embodiment of the present invention, an agent includes a device interface to receive a security event from a network device, a plurality of aggregation profiles, and an agent aggregate module to select one of the plurality of aggregation profiles, and increment an event count of an aggregate event representing the received security event using the selected aggregation profile.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.