Mcafee, Inc.

Networks Associates, Inc.

Andreas Schlemmer

Thomas C H Steiner

Peter Blaimschein

Paul G Fellner

Manuel Nedbal

Gerhard Eschelbeck

Johannes Mayr

A honey pot system, method and computer program product are provided. In use, information is collected which relates to network traffic targeting a plurality of computers associated with a distributed honey pot system. Next, a pattern is detected among the information collected from the distributed honey pot system. To this end, response data is generated, if the pattern is detected.

System, method and computer program product for detecting patterns among information from a distributed honey pot system

A system, method, and computer program product are provided for processing a prefix tree file utilizing a selected agent. In use, a file including a prefix tree is identified. Additionally, an agent is selected from a plurality of agents to process the file. Further, the file is processed utilizing the agent.

System, method, and computer program product for processing a prefix tree file utilizing a selected agent

A security system, method and computer program product are provided. In use, information from a plurality of sensors associated with at least one computer is received, where such information relates to events that have occurred at the at least one computer. Thereafter, the information is correlated, and a reaction is conditionally performed based on the information.

System, method and computer program product for correlating information from a plurality of sensors

A data protocol permitting a source computer to initiate execution of an execution process on a destination computer uses XML data in which different complex data types correspond to different execution processes to be triggered. Parameter data to be used by the associated execution processes may be embedded within the corresponding complex data types.

Protocol for controlling an execution process on a destination computer from a source computer

A system and process for brokering a plurality of security applications using a centralized broker in a distributed computing environment is described. A centralized broker is executed on a designated system within the distributed computing environment. A set of snap-in components are provided with each performing a common management task sharable by a plurality of security applications. A console interface is exposed from the centralized broker. The console interface implements a plurality of browser methods which each define an browser function which can be invoked by each snap-in component. A set of snap-in interfaces are exposed from each snap-in component. Each snap-in interface implements a plurality of service methods which each define a user-interface function which can be invoked by the centralized broker. One or more security applications are brokered through the centralized broker. Each security application is interfaced to the centralized broker through the snap-in components. Each security application is managed by invoking at least one such browser method via the console interface. A plurality of the security applications are centrally serviced by invoking at least one such service method via at least one such snap-in interface.

Growing community of inventors

Steyr, Austria

Andreas Schlemmer