Computer Associates Think, Inc.

Scientific Systems Company, Inc.

Raman K Mehra

Lundy M Lewis

Joao B D Cabrera

Jovan Boskovic

In one embodiment of a method and apparatus for predicting and preventing network attacks, data is collected from network devices during an attack. The collected data is analyzed to identify specific temporal precursors of the attack. The future network activity is then monitored for the presence of the identified temporal attack precursors. When the presence of a precursor is detected, appropriate protective action is taken. Preferably, all steps in this process occur automatically. In the preferred embodiment, the process is performed under the control of one or more network or element management systems. The possible network domain includes data, voice, and video networks and multiple, interconnected network technologies. In one embodiment, triggers responsive to the presence of the identified precursors are placed into a network or element management system. The preferred embodiment of the invention utilizes machine-learning algorithms for discovering precursors of attacks, but any suitable algorithm may be used. The invention may be used in 'attack autopsy' mode only, monitoring mode only, or both. Among other uses, the invention allows integration of Intrusion Detection Systems with Network Management Systems.

Method and apparatus for predicting and preventing attacks in communications networks

A system to control a dynamic system, comprising actuators, sensors, a control module and a plurality of observers to monitor the state of the actuators is disclosed. Certain embodiments of the invention comprise a global failure detection and identification module, a baseline controller, and a retrofit controller. Methods to control the dynamic system are disclosed. Some of the methods utilize a second-order mathematical model of the dynamics of the actuators. In some embodiments, this mathematical model is parameterized by a loss-of-effectiveness (LOE) parameter and a lock-in-place (LIP) parameter. The method may further comprise the step of detecting disturbance conditions and structural damage conditions.

Growing community of inventors

Lexington, MA, United States of America

Raman K Mehra