06487666 is referenced by 418 patents.

A method of describing intrusion signatures, which are used by an intrusion detection system to detect attacks on a local network. The signatures are described using a “high level” syntax having features in common with regular expression and logical expression methodology. These high level signatures may then be compiled, or otherwise analyzed, to provide a process executable by a sensor or other processor-based signature detector.

Title
Intrusion detection signature analysis using regular expressions and logical operators
Application Number
9/232385
Publication Number
6487666 (B1)
Application Date
January 15, 1999
Publication Date
November 26, 2002
Inventor
Gerald S Lathem
Elgin
TX, US
Thomas E Bernhard
Round Rock
TX, US
Steven D Shanklin
Austin
TX, US
Agent
Baker Botts L
US
Assignee
Cisco Technology
CA, US
IPC
G06F 11/30
View Original Source