Connection based denial of service detection
US8191136B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Nov 3, 2003 |
| Grant date | May 29, 2012 |
| Priority date | — |
| Expiry date | Dec 24, 2026 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L43/16
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A system for detecting network intrusions and other conditions in a network is described. The system includes a plurality of collector devices that are disposed to collect data and statistical information on packets that are sent between nodes on a network. An aggregator device is disposed to receive data and statistical information from the plurality of collector devices. The aggregator device produces a connection table that maps each node on the network to a record that stores information about traffic to or from the node. The aggregator runs processes that determine network events from aggregating of anomalies into network events.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.