Event detection/anomaly correlation heuristics
US8458795B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Apr 19, 2008 |
| Grant date | Jun 4, 2013 |
| Priority date | — |
| Expiry date | Oct 22, 2030 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/1458
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A system for detecting network intrusions and other conditions in a network is described. The system includes a plurality of collector devices that are disposed to collect data and statistical information on packets that are sent between nodes on a network. An aggregator device is disposed to receive data and statistical information from the plurality of collector devices. The aggregator device produces a connection table that maps each node on the network to a record that stores information about traffic to or from the node. The aggregator runs processes that determine network events from aggregating of anomalies into network events.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.