06275942 is referenced by 247 patents and cites 5 patents.

A system, method and computer program product for automatic response to computer system misuse using active response modules (ARMs). ARMs are tools that allow static intrusion detection system applications the ability to dynamically increase security levels by allowing real-time responses to detected instances of computer misuse. Several classes of ARMs exist which allow them to interface with several types of network elements found within a computing environment (e.g., firewalls, web servers, Kerberos severs, certificate authorities, etc.). The ARMs, once defined, are deployed in a “plug and play” manner into an existing intrusion detection system within a computing environment. A user (e.g., system administrator) may then configure the ARMs by linking them to specific computer misuses. Upon receipt of an instance of the computer misuse from the intrusion detection system, each ARM linked to the misuse collects pertinent data from the intrusion detection system and invokes a response specified by the ARM class and the collected pertinent data.

Title
System, method and computer program product for automatic response to computer system misuse using active response modules
Application Number
9/81825
Publication Number
6275942 (B1)
Application Date
May 20, 1998
Publication Date
August 14, 2001
Inventor
Steven R Snapp
Austin
TX, US
Steven E Smaha
Austin
TX, US
Crosby Marks
Austin
TX, US
Richard Letsinger
Austin
TX, US
William Leddy
Austin
TX, US
Terry Escamilla
Boulder
CO, US
Thomas Bernhard
Round Rock
TX, US
Agent
Pennie & Edmonds
US
Assignee
Network Associates
CA, US
IPC
G06F 11/34
View Original Source