Multilayered intrusion detection system and method United States Patent 06775657

06775657 is referenced by 265 patents.

A multilayered intrusion detection system and method are disclosed. The method includes monitoring activity on a network and maintaining a registry of each host node address associated with a host node operable to perform host-based intrusion detection services. The method further includes comparing a destination address of the monitored network activity with at least one host node address in the registry. If an address of the network activity matches an address of a registered host node, the network activity is dismissed and allowed to proceed unencumbered to the registered host node. The network activity not destined for a registered host node has intrusion detection services performed on it. The network activity dismissed to the host node has intrusion detection services performed on it at the receiving host node.

Title
Multilayered intrusion detection system and method
Application Number
9/471508
Publication Number
6775657 (B1)
Application Date
December 22, 1999
Publication Date
August 10, 2004
Inventor
Stephen M Baker
San Antonio
TX, US
Agent
Baker Botts L
US
Assignee
Cisco Technology
CA, US
IPC
G06F 17/00
View Original Source

Citations: 265 (view full list)

  1. Paul Judge: Systems and methods for message threat management. Cipher Trust, Fish & Richardson P C, August 22, 2006: US07096498 (185 worldwide citation)
  2. Paul Judge: Systems and methods for upstream threat pushback. Secure Computing Corporation, Fish & Richardson P C, May 1, 2007: US07213260 (180 worldwide citation)
  3. Paul Judge, Guru Rajan: Systems and methods for enhancing electronic communication security. Secure Computing Corporation, Fish & Richardson P C, November 25, 2008: US07458098 (171 worldwide citation)
  4. Timothy D Keanini, Martin A Quiroga, Brian W Buchanan, John S Flowers: Network security system having a device profiler communicatively coupled to a traffic monitor. nCircle Network Security, Fenwick & West, February 20, 2007: US07181769 (154 worldwide citation)
  5. Ashar Aziz, Adrian Drzewiecki, Ramesh Radhakrishnan, Jayaraman Manni, Muhammad Amin: Heuristic based capture with replay to virtual machine. FireEye, Carr & Ferrell, May 1, 2012: US08171553 (151 worldwide citation)
  6. Ashar Aziz, Wei Lung Lai, Jayaraman Manni: Malware containment on connection. FireEye, Blakely Sokoloff Taylor & Zafman, October 22, 2013: US08566946 (144 worldwide citation)
  7. Ashar Aziz: System and method of detecting computer worms. FireEye, Blakely Sokoloff Taylor & Zafman, September 3, 2013: US08528086 (142 worldwide citation)
  8. Ashar Aziz: Computer worm defense system and method. FireEye, Carr & Ferrell, August 23, 2011: US08006305 (142 worldwide citation)
  9. Ashar Aziz, Wei Lung Lai, Jayaraman Manni: Malware containment and security analysis on connection. FireEye, Blakely Sokoloff Taylor & Zafman, September 17, 2013: US08539582 (138 worldwide citation)
  10. Robert William Danford, Kenneth M Farmer, Clark Debs Jeffries, Robert B Sisk, Michael A Walter: Applying blocking measures progressively to malicious network traffic. International Business Machines Corporation, Schmeiser Olsen & Watts, David R Irvin, John R Pivnichny, December 11, 2007: US07308716 (137 worldwide citation)