Patent · US Active

Network intrusion protection

US8677473B2 · kind B2 · utility

24Cited by
3References
21Claims
0Family size

Assignee

Inventors

Key dates

Filing dateNov 18, 2008
Grant dateMar 18, 2014
Priority date
Expiry dateDec 28, 2031

Classification

  • Technology area (CPC H)Electricity
  • CPC primaryH04L63/1433
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

Improved techniques are disclosed for use in an intrusion prevention system or the like. For example, a method comprises the following steps performed by a computing element of a network. A packet of a flow is received, the flow comprising a plurality of packets, wherein the plurality of packets represents data in the network. A network intrusion analysis cost-benefit value is determined representing a benefit for analyzing the received packet for intrusions in relation to a cost for analyzing the received packet for intrusions. The method compares the network intrusion analysis cost-benefit value to a network intrusion analysis cost-benefit threshold to determine whether analyzing the received packet for intrusions before forwarding the received packet is warranted. Responsive to a determination that analyzing the received packet for intrusions before forwarding the received packet is not warranted, the received packet is forwarded, an indication is made that subsequent packets of the flow should be forwarded, and a determination is made whether the received packet indicates an intrusion after forwarding the received packet.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.