Cisco Technology, Inc.

Imin T Lee

Partha P Bhattacharya

Shigang Chen

Aji Joseph

Eli Stevens

Diwakar Naramreddy

Branimir Liker

A network security monitor system groups a plurality of security events into network sessions, correlates the network sessions according to a set of predefined network security event correlation rules and generates a security incident for the network sessions that satisfy one of the network security event correlation rules. The system then presents the information of the network sessions and security incidents to a user of the system in an intuitive form. The user is able to not only learn the details of a possible network attack, but also creates new security event correlation rules intuitively, including drop rules for dropping a particular type of events.

Method and system for displaying network security incidents

A method is disclosed for creating a network topograph that includes all select objects that are in a network. A set of one or more non-select objects in the network is determined. A network topograph is created. Each select object in the network is included in the network topograph. Elements of the set are collectively represented as a single non-select object.

Method and apparatus for creating a network topograph that includes all select objects that are in a network

Growing community of inventors

San Jose, CA, United States of America

Imin T Lee